IST svc and W32 worm problems

Archived from groups: microsoft.public.windowsxp.newusers (More info?)

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/darnit.html
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine.blogspot.com/

--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE) & Security

tmcook wrote:
> > confused:
> I'm running WIN XP and have McAfee Firewall & Antivirus, Spybot,
> AdAware and Trojan Guardian installed and running and using DSL for
> connectivity.
>
> Due to a sluggish hard drive and weird things happening (duplicating
> windows across monitor and green boxes appearing across the toolbar), I
> bought several products and downloaded freeware. (See above). I have
> spent literally! hours/days running these programs to clean up the hard
> drive and when I reboot, I get a prompt from McAfee that it's cleaned a
> file named "winlite" and the virus was w32/sdbot.worm.gen which was
> found in windows/system32. So I ran all the programs again and get a
> prompt stating that all files were cleaned except for 3-4 that were in
> use or running off a program. I do not know how to get around this
> problem.
>
> I get another msg. from McAfee stating;
> CProgramfiles/IST svc/istsvc.exe was found and it's a potentially
> unwanted program, PUP name: Adware-ISTbar.b
> Then it says it was cleaned.
>
> Please help... I'm readly to unplug from the DSL and go back to dial up
> - or just use my Apple laptop.