ISearchTech.YSB

[Nukite]

Somebody please help.. I am trying to get rid of this malicious piece of trash and can't seem to do it. Spybot is the only one so far to even find it. It says it will remove it on reboot yet it doesn't. According to iSearch, there is no third party software that will remove it and if you buy any that says it will you should contact your credit card company for a refund (really it does, heres the link hxxx://toolbar.isearch.com/uninstall ). They're really proud of this supposed fact. Also someone here http://forums.spywareinfo.com/lofiversion/index.php/t51928.html has written a lengthy process that someone says will work but I haven't had much luck with it, it just seems to reproduce itself. Several searches have led me to the conclusion that there are lots of other people out there with the same problem and I would love to be able to wipe it in the face of the people of iSearch. Anyone?????

Disabled Url.

 

[tashi]

Hi there and welcome to the forum.

Could we see a Spybot-S&D log please.

Spybot-S&D
Open SpyBot, check for and get any updates available, close all browsers, check for problems and fix everything found. Then on the toolbar menu select mode and switch to advanced mode, on the left lower down select tools, and view report, ensure all the options are selected near the bottom except

Uncheck[ ] do not report disabled or known legitimate Items.
uncheck[ ] Include a list of services in report.
Uncheck[ ] Include uninstall list in report.

Now select (near the top) view report.
Press export in the save in box choose a place such as your my documents folder, then in your next post near the bottom select the "browse" button; navigate to and attach or post that report please.

If running an older version, fyi:
Spybot-S&D 1.4 Final has been released.
Uninstalling Previous Spybot-S&D
Spybot-S&D Version 1.4 Download

Tutorial

 

[Nukite]

Let me give you a little background.

First I want to say thanks. Next, I'm doing this for a friend of mine. I put this laptop together for him (he's on a DSL connection) and every since he's been inundated with malware. I'm trying to get this fixed for him and he's 200 miles away from me. I'll try and get this log and the info you want ASAP, but I am curious. Is this something you are aware of or is this some new strain that has come out and there hasn't been a fix made up for it yet.

When all the obvious has been eliminated, everthing else, no matter how improbable, must be true.

 

[tashi]

Hello Nukite.

A little information on iSearch:
http://vil.mcafeesecurity.com/vil/content/v_133320.htm
http://securityresponse.symantec.com/avcenter/venc/data/spyware.isearch.html

As your friend lives at a distance you might want to ask a few questions.

1) Security software installed and whether it is up to date.

2) Operating System also up to date, ie: XP should have a Service Pack and all critical patches.

Please see:
So how did I get infected in the first place?
You can go through that article with your friend.

A new variant is possible yes.
A log would help us see what is going on with the system, so if you can provide one (when possible) we will take a look.

Cheers.