WIN32:trojan_gen. UPX

[walter denzel]

hi,
how can i get rid of this:
WIN32:trojan_gen. {UPX}
IsearchTech.PowerScan
IST in registry always reappears
wwX.ysbweb.com/list/softwares/listupdates/istsvc_updater_recover.exe

avast only offers to Abort connection - pops up every 10 seconds

Does anybody know a removal tool? can avast not clean it out?
thanx
walter

[Eddy]

Click on the link in my signature and follow the instructions in the malware removal section.
And stop visiting malicious websites

[DavidR]

avast only offers to Abort connection - pops up every 10 seconds

If avast offers this option, it has been trapped/caught by the new web shield provider and as such it is not yet on your computer, so aborting the connection, stops that from fully downloading.

It's not a good idea to have the link live to a possibly infected file, you can edit your post and remove the www. part (or separate the two parts, www . url link) and the rest of the URL will just be shown as text.

[walter denzel]

thanx eddy,
trying to follow the instructions on your website.
in save mode i cannot open avast scan - just the info window - i just cannot find avast on the sreen to start scan???
spybot doesn't do the job - says problem removed but problem reappears.
give me more help plz
walter

[DavidR]

Try this path to start avast - "C:\Program Files\Alwil Software\Avast4\ashAvast.exe" it is from the properties of the icon that was put on my desktop by avast, so I assume that will start avast.

[walter denzel]

avast was trapped/caught - thanks for the hint davidr. so deinstalling avast did the trick. as you said, the unwanted program - ISTsvc - was fully downloaded then. it appeared on the software list. i could easily remove it from there and clean the rest out with spybot.
hope the problem is gone : )
thanx again
walter