Strange files

[Misty]

Anyone know of

ofwia.exe

gojde.exe

istsvc.exe

googled could not find anything, and they dont seeem to be MS either,
Mcafee, spysubtract, ad-aware don't pick them up.



Thanks.......

[Kinell]

"Misty" <spamless@invalid.com> wrote in news:3b0oqqF6ajaejU1
@individual.net:

> istsvc.exe

When I googled the above I readily found numerous references. Suggest
you review the details here:
http://www.sarc.com/avcenter/venc/da...re.istbar.html

The other two do not show up in searches so are probably randomly
generated file names.

[David H. Lipman]

From: "Misty" <spamless@invalid.com>

| Anyone know of
|
| ofwia.exe
|
| gojde.exe
|
| istsvc.exe
|
| googled could not find anything, and they dont seeem to be MS either,
| Mcafee, spysubtract, ad-aware don't pick them up.
|
| Thanks.......
|

Please read the following URL on Clean Booting XP -- http://support.microsoft.com/kb/310353

Download BHODemon -- http://www.definitivesolutions.com/bhodemon.htm
Download CouterSpy -- http://www.download.com/3000-8022_4-10337358.html

Perform a clean boot and scan with the above software. They will remove the infectors.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

[Ian JP Kenefick]

On Wed, 30 Mar 2005 16:51:11 -0600, "Misty" <spamless@invalid.com>
wrote:

>Anyone know of
>
>ofwia.exe
>
>gojde.exe
>
>istsvc.exe
>
>googled could not find anything, and they dont seeem to be MS either,
>Mcafee, spysubtract, ad-aware don't pick them up.
>
>
>
>Thanks.......
>

Go here http://www.ik-cs.com/suspicious%20files.htm

This should inform you on what to do with susicious file.
--

Regards,
Ian Kenefick
www.ik-cs.com/got-a-virus.htm

[Misty]

"Kinell" <w@invalid.jp> wrote in message
news:Xns962A392865BAkxxx@194.168.222.120...
> "Misty" <spamless@invalid.com> wrote in news:3b0oqqF6ajaejU1
> @individual.net:
>
> > istsvc.exe
>
> When I googled the above I readily found numerous references. Suggest
> you review the details here:
> http://www.sarc.com/avcenter/venc/da...re.istbar.html
>
> The other two do not show up in searches so are probably randomly
> generated file names.


Thanks,
I turned off system restore, and went into safe mode, and did a scan with
McAfee, and it got two bad ones (about 55 files) one included the
istsvc.exe. and it got ofwia.exe (set of files too)
(they had something hiding in restore, or something running so it could not
be deleted, except in safe mode)

Had to do msconfig and stop gojde.exe from booting up at start up, then I
renamed it (gggggojde.exe) in case some other program may need it, but I
think they all came in with a "toolbar" via activex. so I have activex shut
off now.