Nasty Spyware

[SH64]

So my PC got infected with this nasty spyware .. i think its a sex dialer or something similar .. its name shown as IST Toolbar .. it pops up whenever i connect to the internet .. i used many anti adware/spyware programs to get rid of it , but it keeps coming again right after the next start !
i used : XsoftSpy , MS Antispyware , Adaware & Spybot Search & Destroy .. they all detect it & eliminate it , but i comes again right after restarting my PC so i guess it has files in the registry .. i used RegCleaner as well .
MS Antispyware seems to be the most effective one againest it though .

any idea how to get rid or it ! its drivin' me nuts :mad: .. i have to run a system scan everytime i power up my PC just to avoid it .

[Clay]

Have you tried HijackThis?

[SH64]

Have you tried HijackThis?

Nop .. will do .

[Clay]

Also read this if you haven't already:
http://www.spyany.com/program/article_spy_rm_ISTbar.html

[Clay]

link for HijackThis
http://www.spychecker.com/program/hijackthis.html

[SH64]

link for HijackThis
http://www.spychecker.com/program/hijackthis.html

Hmm Hijack this ran a scan & gave me the potential threats though i'm not sure which could be it .
i suspect those :
O16 - DPF: {11111111-1111-1111-1111-111191113457} - file://c:\ied_s7.cab
O16 - DPF: {11111111-1111-1111-1111-511111193457} - file://c:\x.cab
O16 - DPF: {11111111-1111-1111-1111-511111193458} - file://c:\x.cab
O16 - DPF: {23232323-2323-2323-2323-232323291122} - file://c:\x.cab

what the heck are those ? :p
i may try it next time i restart my PC & see the differnece in the log .. that might help , because the system is already scanned now .
i'll try the Spyware Doc too & see .

[thunderhippo]

Mozilla...
Cant say it enough.

Paying for games and software instead of using cracks or keygens will help too. And buy your pron at 7/11.

[SH64]

Mozilla...
Cant say it enough.

Paying for games and software instead of using cracks or keygens will help too. And buy your pron at 7/11.

None of those ... i dont know how i got that spyware , i think that came from some spams i checked , but that was from a while !
as for pr0n .. i have a big screen TV thanks :angel:

[Am_I_Evil]

sometimes the toolbars show up in add/remove programs.....if it there its super simple to delete....if not....then seems your ****ed.....

[jAkUp]

time to format :)

[holmes]

hearing about stuff like this is why I'm happy I use linux...
;)

[netviper13]

hearing about stuff like this is why I'm happy I use linux...
;)

Eh, I just use Firefox and that's all it takes to keep the spyware off my computer. Haven't had any major problems since I gave IE the boot.

[SH64]

sometimes the toolbars show up in add/remove programs.....if it there its super simple to delete....if not....then seems your ****ed.....

Looks like you are right !
with the help of Hijack This i found the name of that tool bar that appears when windows starts .. & when the pop-up appeard i went to add/remove programs & found it there , uninstalled it & its gone for now. (it only appear in the list when the pop-ups starts shwoing up)
lets see if it comes back in the next windows start .
either ways uninstalling it is much easier than running a system scan everytime i restart .

[XP_GUN]

I had the same problem with my dads laptop but I tryed everything I used spybot and found alot of spyware programs then used adaware found more and then HijackThis, but I couldent stop the porn adds he was getting so I had to format his hard drive to give it a clean start.

Your problem sounds small but have you tryed Microsofts version?

[SH64]

Your problem sounds small but have you tryed Microsofts version?

You mean MS Anti spyware ? .. yes i did & it does a great job of removing it & all other infections , the problem that it still come back so i guess not all of its roots are detected .
i uninstalled that toolbar for now like i mentioned above & what remains it to see if it comes back in the next restart or not .
i'll report back when i do .

[SH64]

Ok i restarted my PC & the toolbar pop-ups didnt show up ! i think its gone for good this time :D

[BioHazZarD]

run hijackthis and adaware in windows safe mode ive been doing this for months and i always get rid of any nasty spyware.

[SH64]

run hijackthis and adaware in windows safe mode ive been doing this for months and i always get rid of any nasty spyware.

Hmm i didnt try using anti spyware progs in safe mode . i'll keep that in mind next time ... i hope theres no next time though!

[Dr.Nick]

Give CWShredder a try.
http://www.softpedia.com/get/Internet/Popup-Ad-Spyware-Blockers/CWShredder.shtml

[SH64]

Give CWShredder a try.
http://www.softpedia.com/get/Internet/Popup-Ad-Spyware-Blockers/CWShredder.shtml

Cool .. thanks !