Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

getting rid of IST Cleaner Pro


  • Please log in to reply
9 replies to this topic

#1 chumphries022213

chumphries022213

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:25 PM

Posted 11 March 2014 - 11:58 PM

My laptop has recently started running IST Cleaner Pro on it.  I didn't download it (to my knowledge) and now can't get rid of it.  Can anyone help?


Edited by hamluis, 12 March 2014 - 06:47 AM.
Moved from Win 7 to Am I Infected - Hamluis.


BC AdBot (Login to Remove)

 


#2 EwenB

EwenB

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:02:25 PM

Posted 12 March 2014 - 03:17 AM

Google for the free version of Revo Uninstaller... it'll move it for you!



#3 NickAu1

NickAu1

    Bleepin' Defenestraphobic


  • Members
  • 2,188 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:127.0.0.1
  • Local time:02:25 PM

Posted 12 March 2014 - 04:07 AM

..

 

Read this..

http://www.bleepingcomputer.com/virus-removal/remove-security-cleaner-pro

 

 

I didn't download it (to my knowledge)

You may need a Malware removal expert's help.


Edited by NickAu1, 12 March 2014 - 05:55 AM.

Linux - Ubuntu 14.04 LTS 64bit --Intel® Core i5 Processor 4460. MSI H81-P33 MB,  16GB Ram,  256GB mSATA SSD Boot + 1TB 5400RPM SATA .

Ubuntu Desktop Computing Made Easy (Trusty 14.04 LTS)

NoScript Configuration Guide

 

Windows users.

Answers to common security questions - Best Practices   .By Quietman7
 


#4 noknojon

noknojon

    Almost Retired


  • Members
  • 9,976 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Victoria Australia
  • Local time:02:25 PM

Posted 12 March 2014 - 07:20 AM

Hello chumphries -

Are you able to see the program in the All Programs list or in Control Panel > Programs and Features ??

Please tell us when it started causing problems, and what you were doing at the time (may give us ideas).

 

It sounds like "someone" hit an Advertising or download link that carried the program.

 

Is the actual name IST Cleaner Pro or 1st Cleaner Pro as the actual program is a bit hidden (as listed)

 

Do you have an Antivirus program, and did this pick it up ??

 

First -

Download Security Check by Screen317 from HERE
* Save it to your Desktop.
* XP users Double-click SecurityCheck.exe (looks like a padlock)

* Vista and Windows 7 users Right click on it and select Run as Administrator
* Follow the onscreen instructions inside of the black box.
* A Notepad document should open automatically called checkup.txt; please post the contents of that document.
Note: If any security program requests permission to access the Internet, allow it to do so.

 

 

Next -

Please download and run RKill by Grinler, to desktop
A black DOS box will briefly flash and then disappear.

It may run up to 2 minutes at most

This is normal and indicates the tool ran successfully.

A log will be on the desktop.

Please Copy and Paste the log back here.

 

 

Now - 

Please download AdwCleaner by Xplode and save to your Desktop.
NOTE : Please close or save all work, as the computer will be Rebooted
* Double-click on AdwCleaner.exe to run the tool.
* Vista/Windows 7/8 users right-click and select Run As Administrator.
* Click on the Scan button. (only once)
* AdwCleaner will begin...be patient as the scan may take some time to complete.
* After the scan has finished, click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review. 
* If you see any which you do not want removed, remove the check mark next to it. 

* If you are not sure then please post that log back here.

* Next: Click on the Clean button (only once) to remove the selected items. 
* You will receive a message telling you that all programs will be close so that the infections can be removed. 
* Click on OK, and then OK again to confirm the reboot.
* When cleaning process is complete a log (AdwCleaner[S0].txt ) of what was removed will be on your desktop. 
* Please copy and the paste this log in your next post.

* A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

 

We will see what this brings out first -


******************************************* Waiting for a reply ??

                                                                                            Press F5 to Refresh as you may have one waiting************************************************


#5 chumphries022213

chumphries022213
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:25 PM

Posted 12 March 2014 - 10:23 PM

Yes it is definitely IST Cleaner Pro.  It isn't in the Control Panel > Programs and Features list.  I had just updated to Java Runtime Environment 7 (32 Bit) and the next day this pops up on my laptop when I start it up.  Java had several things that it wanted me to add but I made sure to uncheck all the boxes so theoretically added nothing other than the Java.  I'm currently using Avast! Free antivirus (but if you have a better suggestion, I'm open to it.  Had AVG but that wasn't doing me a lot of good.)  When I updated Java it did give me a virus block notice.  I tried to find a log of something in it just now, but can't find anything.  I've listed the logs that you suggested below.  Thank you for helping me!

 

 

 

Security Check By screen 317:

 

UNSUPPORTED OPERATING SYSTEM! ABORTED!

RKill:

 

Rkill 2.6.5 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2014 BleepingComputer.com
More Information about Rkill can be found at this link:
 http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 03/12/2014 07:58:49 PM in x64 mode.
Windows Version: Windows 7 Home Premium Service Pack 1

Checking for Windows services to stop:

 * No malware services found to stop.

Checking for processes to terminate:

 * No malware processes found to kill.

Checking Registry for malware related settings:

 * No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

 * No issues found.

Checking Windows Service Integrity:

 * No issues found.

Searching for Missing Digital Signatures:

 * No issues found.

Checking HOSTS File:

 * No issues found.

Program finished at: 03/12/2014 08:01:02 PM
Execution time: 0 hours(s), 2 minute(s), and 13 seconds(s)

ADwCleaner:

 

# AdwCleaner v3.021 - Report created 12/03/2014 at 20:05:45
# Updated 10/03/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Candyann - HPLAPTOP
# Running from : C:\Users\Candyann\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\Candyann\AppData\Local\genienext
File Deleted : C:\Users\Candyann\AppData\Roaming\Mozilla\Firefox\Profiles\tvz2oda3.default\searchplugins\conduit-search.xml

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\AVG Secure Search
Key Deleted : HKLM\Software\caphyon

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16521


-\\ Mozilla Firefox v27.0.1 (en-US)

[ File : C:\Users\Candyann\AppData\Roaming\Mozilla\Firefox\Profiles\tvz2oda3.default\prefs.js ]


-\\ Google Chrome v

[ File : C:\Users\Candyann\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [24360 octets] - [04/01/2014 05:46:32]
AdwCleaner[R1].txt - [1142 octets] - [04/01/2014 05:58:58]
AdwCleaner[R2].txt - [1451 octets] - [12/03/2014 20:04:30]
AdwCleaner[S0].txt - [24023 octets] - [04/01/2014 05:49:43]
AdwCleaner[S1].txt - [1206 octets] - [04/01/2014 06:00:06]
AdwCleaner[S2].txt - [1331 octets] - [12/03/2014 20:05:45]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1391 octets] ##########
 



#6 noknojon

noknojon

    Almost Retired


  • Members
  • 9,976 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Victoria Australia
  • Local time:02:25 PM

Posted 12 March 2014 - 11:26 PM

Hello -

RE : Security Check By screen 317:

UNSUPPORTED OPERATING SYSTEM! ABORTED!

First. Make sure that you "download all programs to Desktop"

Please follow => Temporarily Disable Your Anti-virus and re run Security Check By screen 317.

Your system will (should) have no problems with this basic program. It is only blocked by infections or Antivirus type programs.

I currently have it installed on my Windows 7 Home Premium Service Pack 1.

Vista/Windows 7/8 users Right-click  on it and select Run As Administrator.

 

 

While Antivirus is disabled please run this also -

Please download Junkware Removal Tool by thisisu and save it to your Desktop.
* Close all open programs and disable any protection/security software now to avoid potential conflicts.
* Double-click on JRT.exe to run the tool.
* Vista/Windows 7/8 users right-click and select Run As Administrator.
* The tool will open and start scanning your system.
* Please be patient as this can take a while to complete depending on your system's specifications.
* On completion, a log file named JRT.txt will automatically open and be saved to your Desktop.
* Copy and paste the contents of JRT.txt in your next reply.
These tools will search for and remove many potentially unwanted programs (PUPs), adware, toolbars, browser hijackers, extensions, add-ons, browser helper objects (BHOs) and other junkware to include many related registry entires (values, keys)


******************************************* Waiting for a reply ??

                                                                                            Press F5 to Refresh as you may have one waiting************************************************


#7 chumphries022213

chumphries022213
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:25 PM

Posted 12 March 2014 - 11:47 PM

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Home Premium x64
Ran by Candyann on Wed 03/12/2014 at 21:31:37.98
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Wed 03/12/2014 at 21:42:20.94
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Home Premium x64
Ran by Candyann on Wed 03/12/2014 at 21:31:37.98
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Wed 03/12/2014 at 21:42:20.94
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 



#8 noknojon

noknojon

    Almost Retired


  • Members
  • 9,976 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Victoria Australia
  • Local time:02:25 PM

Posted 13 March 2014 - 06:36 AM

I can find many programs listed as xxxx Cleaner Pro.

But Google has no record at all of IST Cleaner Pro.

I can find XP Cleaner Pro / Vista Cleaner Pro / Windows7 Cleaner Pro / and others.

The best I can do is to post several links, and you tell me if any look like your problem.

Or you can post me a link to let me see a picture of the problem program.

SparkTrust PC Cleaner says it is IST Related  (scam program)

 

Security Cleaner Pro from Bleeping Computer
 

Scroll down to see Registry Cleaner Pro

 

Now I have finally gone German, as it sounded a bit odd to me. I found this site ......

Warnung vor Scareware - Beispiel "RegClean Pro" - Experto.de
www.experto.de/.../warnung-vor-scareware-beispiel-regclean-pro.html?Cached
SimilarRegClean Pro soll nach Angaben des Herstellers Systweak "bessere ... Test: Wie hilfreich ist RegClean Pro in der Praxis und was macht das Programm?
Warnung vor Scareware - Beispiel "RegClean Pro"
Die Namen der Programme lassen eine nützliche Funktion erwarten wie etwa RegClean, die Abkürzung für Registry Cleaner, also Registry-Reiniger. Dazu kommt noch Pro für Professional.
 

A rough translation gives me this ...................

 

Warning of Scareware - Example "RegClean Pro"

warning-for-scareware-example-regclean-pro.html?Cached
SimilarRegClean Pro is according to the manufacturer "Systweak " better ... Review: How helpful IST RegClean Pro in Practice and what the Program does?
The names of the programs can be a useful feature expect such as RegClean, short for registry cleaner, so registry cleaners. What's more Pro for Professional.

 

I will find and post a removal script for this tomorrow -


******************************************* Waiting for a reply ??

                                                                                            Press F5 to Refresh as you may have one waiting************************************************


#9 noknojon

noknojon

    Almost Retired


  • Members
  • 9,976 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Victoria Australia
  • Local time:02:25 PM

Posted 14 March 2014 - 01:36 AM

http://www.systweak.com/Products/ <= This seems to be the nearest link to the programs.

 

I think this would show the program.

 

Can you access Security Check by Screen317 from HERE

If you first Temporarily Disable Your Anti-virus

Next - Save it to your Desktop.

Then you must use"Vista and Windows 7 users Right click on it and select Run as Administrator"


******************************************* Waiting for a reply ??

                                                                                            Press F5 to Refresh as you may have one waiting************************************************


#10 noknojon

noknojon

    Almost Retired


  • Members
  • 9,976 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Victoria Australia
  • Local time:02:25 PM

Posted 14 March 2014 - 05:05 PM

Hello -
I have looked at this with a few others and nobody has yet seen this.

 

If the program is not listed in Add/Remove or Programs and Features, look for an uninstall icon (shortcut) from within its program group.

Click on Start > All Programs (or Program Files), look for the program folder by name and use the program's uninstaller.

If it's not there, the next step would be to open Programs > Accessories > Windows Explorer.

Now manually navigate to the program's folder itself, look for an uninstaller file (i.e. uninstall.exe) and double-click on it to run.

 

"the next day this pops up on my laptop when I start it up." By this do you mean you only saw it once or will it "pop up" every time you turn on ??


******************************************* Waiting for a reply ??

                                                                                            Press F5 to Refresh as you may have one waiting************************************************





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users