Avast WEBforum

Other => General Topics => Topic started by: walter denzel on February 27, 2005, 11:57:41 PM

Title: WIN32:trojan_gen. UPX
Post by: walter denzel on February 27, 2005, 11:57:41 PM
hi,
how can i get rid of this:
WIN32:trojan_gen. {UPX}
IsearchTech.PowerScan
IST in registry always reappears
wwX.ysbweb.com/list/softwares/listupdates/istsvc_updater_recover.exe

avast only offers to Abort connection - pops up every 10 seconds

Does anybody know a removal tool? can avast not clean it out?
thanx
walter
Title: Re: WIN32:trojan_gen. UPX
Post by: Eddy on February 28, 2005, 12:18:51 AM
Click on the link in my signature and follow the instructions in the malware removal section.
And stop visiting malicious websites
Title: Re: WIN32:trojan_gen. UPX
Post by: DavidR on February 28, 2005, 01:14:13 AM
Quote
avast only offers to Abort connection - pops up every 10 seconds
If avast offers this option, it has been trapped/caught by the new web shield provider and as such it is not yet on your computer, so aborting the connection, stops that from fully downloading.

It's not a good idea to have the link live to a possibly infected file, you can edit your post and remove the www. part (or separate the two parts, www . url link) and the rest of the URL will just be shown as text.
Title: Re: WIN32:trojan_gen. UPX
Post by: walter denzel on February 28, 2005, 11:02:04 PM
thanx eddy,
trying to follow the instructions on your website.
in save mode i cannot open avast scan - just the info window - i just cannot find avast on the sreen to start scan???
spybot doesn't do the job - says problem removed but problem reappears.
give me more help plz
walter
Title: Re: WIN32:trojan_gen. UPX
Post by: DavidR on March 01, 2005, 12:06:26 AM
Try this path to start avast - "C:\Program Files\Alwil Software\Avast4\ashAvast.exe" it is from the properties of the icon that was put on my desktop by avast, so I assume that will start avast.
Title: Re: WIN32:trojan_gen. UPX
Post by: walter denzel on March 01, 2005, 08:03:36 PM
avast was trapped/caught - thanks for the hint davidr. so deinstalling avast did the trick. as you said, the unwanted program - ISTsvc - was fully downloaded then. it appeared on the software list. i could easily remove it from there and clean the rest out with spybot.
hope the problem is gone : )
thanx again
walter