Isvcmon.exe, and virus activity

Discussion in 'Windows Desktop Systems' started by Engineer, May 22, 2004.

  1. Engineer

    Engineer OSNN Addict

    Twice now while updating windows I have had a DOS screen appear in the background of the update download screen, which lists all my NAV files and then disables them, gives me weird messages ("thanks for leeching") and disables NAV, causing me to uninstall and reinstall NAV for it to work again.

    I found the W32 Blaster. worm in my system and deleted it. Then I reloaded, NAV, and, this time, NIS and started surfing. NIS caught a file Isvcmon.exe trying to connect me to a site (never heard of it before). I stopped the process. What is this file?? Isvcmon.exe. It is also in my startup file! Is this another virus???

    NAV scans have not identified it as a virus.

    (As I am writing this NIS just caught an inbound trojan).

    Thanks in advance for your help
  2. Lee

    Lee OSNN Proxy

    I have searched high n low, nothing. Search your pc for the file then manually delete it.
  3. Engineer

    Engineer OSNN Addict


    Isvcmon.exe it resides on the registry at

    I deleted the ISVCMON.EXE from Windows/System32 directory with no ill effects and since then, my system has stopped trying to connect to the internet.

    I have conducted a search on my system and the only place where this file now resides is on the registry. It is now currently showing up on my startup list when I access it through MSCONFIG (but not starting up).

    How do I get rid of this last registry entry? I found the two other entrys at HKEY/SOFTWARE/Microsoft/Windows/CurrentVersion/Run and at HKLM/SOFTWARE/Microsoft/Windows/CurrentVersion/Run
    but I do not know where
    SOFTWARE/Microsoft/Windows/CurrentVersion/Run, is.

  4. tdinc

    tdinc █▄█ ▀█▄ █ Political User

    Sterling Heights, MICHIGAN
    This program works very well with reg files or files that are hard to find or remove. give it a try. its freeware and well respected.

    link :)