Spyware which Ad-Aware can't get rid of - on work machine!

londonman81

Yesterday I started getting strange pop ups on my machine whenever I searched for something on Google.

I suspected this was spywre or something of the sort - as until now I've just used IE at work.

So I downloaded Adaware and ran it this morning. Found 220 infections in the first run. Fixed most of these but it still doesn't fix 26 of them - it says 'Some files could not be fixed....' and it also specifies this file: C:\Program Files\istsvc\istsvc.exe

The scan results show the following 'families':

istbar

DyFuCA

Does anyone know what these are and how I can get rid of them? Ad aware seems to be having trouble with these.


Thanks

L

cpdpurcell

Try Spybot-Search and Destroy

http://www.safer-networking.org/en/download/

works every time for me ;o)

Browntoa

you need to be in safe mode and run them

rushnowt

Browntoa wrote:

you need to be in safe mode and run them

ohh, i didn't realise this I tend to run them while I still online.

Why so you have to be in safe mode, and more importantly, how do I get into it lol

I'm using windows xp pro, if thats any use ??

londonman81

cpdpurcell wrote:

Try Spybot-Search and Destroy

http://www.safer-networking.org/en/download/

works every time for me ;o)

Tried Spybot just now and it doesnt detect anything - just says 'Congratulations - no immediate threats found' alongside a big green tick.

Does anyone actually know what these malicious files are?

Thanks,

L

rushnowt

Hiya londonman

Sorry I'm not at all techie minded so of no help to ya lol

but I had a really perculiar problem like yours a week or so ago and nothing I ran would clear it.

I did get loads of info and managed to fix it with the help of this site

http://www.majorgeeks.com/

HTH a little

Browntoa

hit f8 on reboot or go to the start button, click on run, type msconfig and ok, click on boot.ini tab and tick safe mode...opposite to turn it off

download the microsoft anti spyware and use that

F1F1

londonman81 wrote:

The scan results show the following 'families':

istbar

DyFuCA

Does anyone know what these are and how I can get rid of them? Ad aware seems to be having trouble with these.

iISTbar is an IE toolbar, homepage- and search-hijacker provided by Integrated Search Technologies/CDT Inc.

http://www.spywareguide.com/product_show.php?id=572

Dial/DyFuCA-A is a porndialer program. Each time the dialler is run, it tries to connect to a pornographic website.

http://www.antivirusworld.com/articles/dyfuca.php

The websites include removal info.

cpdpurcell

londonman81 wrote:

Tried Spybot just now and it doesnt detect anything - just says 'Congratulations - no immediate threats found' alongside a big green tick.

Does anyone actually know what these malicious files are?

Thanks,

L

Sorry m8 - hope you manage to sort it.

boogiemaster

If you go to a web page and it freezes all of a sudden? Then you have gone to a page that downloads software to your computer without your permission.
It’s normally a page called yahoo, it’s a yahoo account that someone has set up with some downloader program on it.

The program downloads and runs; it then downloads other software from servers all over the place.
The normal software that you get is 180 solutions IST toolbar Internet optimizer Search assistant, and lots of pop ups and head aches.

Microsoft anti spy is a brilliant program for removing all that crap from your pc, get it installed and it’s on a free trail.

180 solutions know about people having this software downloaded illegally and they don’t care, they are an advertising company who get paid a lot of money by companies to advertise their products.

It’s hard to remove and it reinstalls because of a program that checks to see if it’s still running? If it detects its gone? It will install more software and eventually reinstall all of the first software.
Microsoft anti spy can take care of all the software and is worth the subscription to save these headaches alone.

I know about this because I’ve had it a few times myself, If you visit a web site for a TV? It will send pop ups to you very quickly for TVs.

It also alters your start page and causes you lots of grief, 180 solutions say they don’t know about this illegal practice? But they do, they also know about dodgy programmers who have it on their sites and they pay a lot of money to them.

stressedoutmum

Browntoa re your post No 7 giving advice how do you run Windows 98 in safe mode please.