Greetings,
Before you post in this forum,please read and follow the instructions in this post: Guidelines for Posting in This Forum
Failure to follow these instructions will only result in delays of the cleaning and removal process.
If you ran other AntiVirus and/or AntiSpyware programs and have the logs available, please post them as well.
Our goal is to help you clean your PC and restore it to pre-infection condition wherever possible.
Thank You
![]() ![]() |
Mar 27 2004, 04:32 PM
Post
#1
|
|
![]() The Flying Dutchman Group: General Admin Posts: 12070 Joined: 7-May 03 Member No.: 3255 |
How to remove iSearch Toolbar Spyware
If you're running XP ... Go to the link below and under the letter "T" scroll down to "Toolbar Repair" and download & run the "Toolbar Repair Utility" which corrects missing Address Bar, Toolbars and/or Menu bars in Windows Explorer and Internet Explorer and hopefully will correct your problem. http://www.kellys-korner-xp.com/xp_abc.htm **************************** Toolbar - Missing This corrects missing Address Bar, Toolbars and/or Menu bars in Windows Explorer and Internet Explorer. Download Toolbar Repair Utility here. http://www.kellys-korner-xp.com/regs_edits/ToolbarRepair.Exe Do manually alter the settings...see below: Close any open Internet Explorer and Windows Explorer windows. Click Start/Run/Regedit HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar There are 3 sub keys: Explorer, ShellBrowser, WebBrowser'. In each of these sub-keys is the entry for ITBarLayout For IE Toolbars: The WebBrowser Sub-key directly affects IE. For Windows Explorer Toolbars: The Explorer Sub-key directly affects Explorer. The ShellBrowser sub-key may affect IE as well. Its effect on IE and Windows Explorer is unknown at this time, so if the first option doesn't work, delete the ITBarLayout value here as well. Choose the relevant sub-key and right click where it says ITBarLayout and select Delete. The deleted value will automatically be recreated for you. You may want to right click on the main key (above) and select Export. This will allow you to backup the contents of the whole key, including subkeys. |
|
|
|
Mar 27 2004, 09:22 PM
Post
#2
|
|
![]() Master of Disaster Recovery Group: General Admin Posts: 15206 Joined: 24-March 03 From: Albuquerque, NM Member No.: 2879 |
Thanks for the info Hunter. It is my understanding that AdAware with the current reference file will also remove the iSearch beast, including the restrictions.
For those who used HJT to remove it however, the fix you posted is great. I also have a reg file that will fix this problem. -------------------- Happiness ain't a thing in itself--it's only a contrast with something that ain't pleasant. Mark Twain |
|
|
|
Mar 31 2004, 12:44 AM
Post
#3
|
|
|
New Member Group: Member Posts: 1 Joined: 31-March 04 Member No.: 6235 |
Hey there. i tried uninstalling using this, but the uninstall fails. http://toolbar.isearch.com/uninstall/
i know i still have it because it parses blazefind results when i do a google search. i am wondering if it is because i tried to manually removed it first. would it be foolish to try to re-install blazefind then uninstall? Where would i download this p.o.s. if that would work. Thanks for suggestions. i can post hijack if that helps. |
|
|
|
Mar 31 2004, 12:55 AM
Post
#4
|
|
![]() The Flying Dutchman Group: General Admin Posts: 12070 Joined: 7-May 03 Member No.: 3255 |
Could be..but why do not you try first adware by lavasoft...
which you can get for free and read about here... Guidelines for Posting in This Forum READ THIS FIRST PLEASE http://forum.gladiator-antivirus.com/index...showtopic=10517 Then follow those instructions and end up posting a hijack log in this fourm. HELP! Think you are Infected? http://forum.gladiator-antivirus.com/index.php?showforum=170 That way you get a second shot at the nasties with Adaware to see if it can clean it off and then a hijack log for us to see if there is anything left. Adware should clean it up good. |
|
|
|
Apr 3 2004, 11:57 PM
Post
#5
|
|
![]() New Member Group: Member Posts: 2 Joined: 3-April 04 Member No.: 6363 |
Hello people.
I too was having a problem removing the ISEARCH toolbar. Adaware didn't identify it even with the updates/scanning and reboots, so i went with Hunter's option: http://toolbar.isearch.com/uninstall/. That seems to have worked for me. :thx: By going to that link do you think it's possible anything else may have been installed in the background without me knowing? i did run another adaware scan just in case but was wondering all the same since that program didn't ID the toolbar in the first place. |
|
|
|
Apr 4 2004, 01:04 PM
Post
#6
|
|
![]() The Flying Dutchman Group: General Admin Posts: 12070 Joined: 7-May 03 Member No.: 3255 |
QUOTE (Eternal Learner @ Apr 3 2004, 06:57 PM) Hello people. I too was having a problem removing the ISEARCH toolbar. Adaware didn't identify it even with the updates/scanning and reboots, so i went with Hunter's option: http://toolbar.isearch.com/uninstall/. That seems to have worked for me. :thx: By going to that link do you think it's possible anything else may have been installed in the background without me knowing? i did run another adaware scan just in case but was wondering all the same since that program didn't ID the toolbar in the first place. Well other people seem to have the same concern since it is the option suggested by the people who put this thing out...and it is a fact that some users seem to be infected not only with isearch..but at the same time another exploit that puts hosts files on their PC that will not even let them get the adaware update and/or have access to many other security sites and download servers. But I have found out that if it works to clean it off for you..that in fact they do not wack you with anything else at the same time it uninstall and you do a reboot. But we are seeing now a blended threat. But let's face it people..none of you are getting the isearch from going to their site and downloading it at will..if is coming from other sites you visit..and those site do make $$$ off the fact you do have the thing on your PC and they want you to use it as long as possible. Therefore the race is on to do just that so what other code you might pick up at the same time from them and not specifically the isearch people will always be the problem. |
|
|
|
![]() ![]() |
| Lo-Fi Version | Time is now: 20th November 2009 - 11:33 PM |