Isvcmon.exe, and virus activity

[Engineer]

Twice now while updating windows I have had a DOS screen appear in the background of the update download screen, which lists all my NAV files and then disables them, gives me weird messages ("thanks for leeching") and disables NAV, causing me to uninstall and reinstall NAV for it to work again.

I found the W32 Blaster. worm in my system and deleted it. Then I reloaded, NAV, and, this time, NIS and started surfing. NIS caught a file Isvcmon.exe trying to connect me to a site (never heard of it before). I stopped the process. What is this file?? Isvcmon.exe. It is also in my startup file! Is this another virus???

NAV scans have not identified it as a virus.

(As I am writing this NIS just caught an inbound trojan).

Thanks in advance for your help
Engineer

 

[Lee]

I have searched high n low, nothing. Search your pc for the file then manually delete it.

 

[Engineer]

more

Isvcmon.exe it resides on the registry at
SOFTWARE/Microsoft/Windows/CurrentVersion/Run.

I deleted the ISVCMON.EXE from Windows/System32 directory with no ill effects and since then, my system has stopped trying to connect to the internet.

I have conducted a search on my system and the only place where this file now resides is on the registry. It is now currently showing up on my startup list when I access it through MSCONFIG (but not starting up).

How do I get rid of this last registry entry? I found the two other entrys at HKEY/SOFTWARE/Microsoft/Windows/CurrentVersion/Run and at HKLM/SOFTWARE/Microsoft/Windows/CurrentVersion/Run
but I do not know where
SOFTWARE/Microsoft/Windows/CurrentVersion/Run, is.

Thanks
Engineer

 

[tdinc]

This program works very well with reg files or files that are hard to find or remove. give it a try. its freeware and well respected.

link 🙂