• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Spyware reinstalls on login

sluthy

Member
For a while now, it seems whenever one of my family logs in to our computer (we're all administrators :S), McAfee reports two new PUPs everytime:

C;/Documents and Settings/Username/Local Settings/Temporary Internet Files/Conent.IE5/gobbledygookdifferenteactime/istsvc.exe (I've had IST before, it's a bitch)

and C;/WINDOWS/Temp/f5r4Bnh.exe (this file has popped up on my computer and process list for ages, what the freaking hell is it?)

I've got a HijackThis log in case anyone can analyse it, and I'm assuming by the fact that it seems to occur at every login rather than boot that it would be in HKCU (Current User) but I can't see anything out of the ord. Ideas? Spybot and AdAware usually draw negatives and don't fix this.
 
load into safe mode,

Download and install all windows updates.

Run updated Adaware SE and Spybot.

Delete istsvc.exe or anything related to it from the registry. Under HKEY Local machine, software, microsoft, windows, current version, RUN and RUNONCE. As well to make sure it's not in the start up folder under the start button -- > programs.

Load back to normal.
 
Find the problem process and kill it. Then look up how to get rid of it.

Some of these programs are downloading agents that reside on your machine and their sole function is to make sure the spyware is installed. If it isnt, it will download and install it.

Another option is obviously not run as an admin 😉
 
Back
Top