NationStates Jolt Archive

I had an i-search popup on my computer that used to pop up regularly. I tried spybot, adaware, spysweeper etc, but they would either not detect it or detect it and say they removed it, but it would continue to popup.

I then got a program that said it got rid of it, but now it open firefox and loads for a second and comes up with an error message saying that it doesnt have permission to connect to i-search :confused:

Ive tried most things I can think of but its still there, anyone else have any ideas?

Edit: Any ideas short of formatting and starting again, or installing linux.

I had an i-search popup on my computer that used to pop up regularly. I tried spybot, adaware, spysweeper etc, but they would either not detect it or detect it and say they removed it, but it would continue to popup.

I then got a program that said it got rid of it, but now it open firefox and loads for a second and comes up with an error message saying that it doesnt have permission to connect to i-search :confused:

Ive tried most things I can think of but its still there, anyone else have any ideas?

Edit: Any ideas short of formatting and starting again, or installing linux.

Did you do a signature update for those programs? Do this clean out the spyware, then reboot your computer. It is still in memory from the looks of it.

Did you do a signature update for those programs?

Signature update??

I've updated the definitions if thats what you're talking about

Signature update??

I've updated the definitions if thats what you're talking about

Same thing, I'm using anti-virus terms again ...

Same thing, I'm using anti-virus terms again ...


O.K. I have the latest versions of the programs, and the latest definitions

:P good old i=search

its really a beautful program when looked into

not because of damage done but its so ez. to get it

anyways here my suggestion

find out what your dealing with (yes i know i-search but it may not be just that, judgeing by its quickness to reinstall its not only i-search)

hit crtl+alt+deleate

copy down all process running then one by one search what they do in google

you can determine what is bad and what is good and on that page also should be removeal instructions


and this only works with winxp
98 doesnt show processes...not sure about ME

Just looking at google, you have a very nasty spyware infection. :confused:

Read this
http://www.ahbl.org/notices/isearch.php

One person suggested this software
http://www.pestpatrol.com/

<snip>

im using 98SE :(

I do have Hijack This though that creates a log file of all your running processes (i think its that one, I hav so many at the moment i get confused)

<snip>

I have tried pest patrol. I search google and alltheweb etc and numerous computing forums to try and find some answers. Tried everything that was reccomended, apart from the manual processes that took a million steps +.

Try starting your machine clean (dont run anything at start up)
Ctrl-alt-del into task manager and check that only valid processes are running.
If you're not sure what they are write them down and check the web. A yahoo search will identify the valid processes. Stop all processes that seem suspicious.
If you've killed it then check spy-bot in advanced mode to see if you can find the executable in start-up.
stop all suspect exe's from startup.
See if you can track down the home location. Lop, for instance, lurks in >documents an settings/all users/application data/
and is very nasty to remove. (set to see hidden files)
some others lurk in programme files.
Delete the exe once you've stopped it and when your sure you've ID'd it (if you're not too sure try renaming it (just add a 1 to the file name ) and that'll stop it running again.
Sorry thats all a bit jumbled but so's my head


crap. that's all rubbish in SE sorry

From my reading, I-Search is one of WORST ones out there.

I guess you'll have to go remove it manually, then find the authors and do horrible things to them.

http://www.destrasolutions.ca/phpBB2/viewtopic.php?p=10&

Sounds like something else keeps reinstalling iSearch.
Try AVG.

<snip>

lol, I've already gone through and deleted the files that the computer forums have said are associated with it, and removed the registry entries, I think that is why it is not working properly and comes up wit the error message.

I dont know if there is another adware program associated with it, but i-search seems to be the only one that causes problems

Oh yes, the owners of iDownload.com are resposible for iSearch.
I suspect you got infected when hitting a web site associated with iDownload.com

Oh yes, the owners of iDownload.com are resposible for iSearch.
I suspect you got infected when hitting a web site associated with iDownload.com

bastards

*puts on ninja clothing and pulls out sharpest knife* Time for an errr, walk, yeah thats what im doing ;)
*slips out side door*

lol, I've already gone through and deleted the files that the computer forums have said are associated with it, and removed the registry entries, I think that is why it is not working properly and comes up wit the error message.

I dont know if there is another adware program associated with it, but i-search seems to be the only one that causes problems

Get rid of anything related to 180Search as well. It's the sister ad-ware.

Removing it will probably require multiple uses of different anti-spyware products with multiple reboots in Safe Mode, as well as some manual steps.

After you finish that, you really should consider not using Internet Explorer anymore.

Get rid of anything related to 180Search as well. It's the sister ad-ware.

I havent seen any signs of anything like that, would adaware or spybot (my two main detectors) pick it up??

I get rid of anything they pick up unless I know I need it

After you finish that, you really should consider not using Internet Explorer anymore.

I use Firefox and it seems to be Firefox its hijacked as it loads up its site in Firefox

It opened just then, the error message is

The connection was refused when attempting to connect to www.isearch.com

I havent seen any signs of anything like that, would adaware or spybot (my two main detectors) pick it up??

I get rid of anything they pick up unless I know I need it
What do you definitely need? Are you sure that it isn't there?

It opened just then, the error message is

The connection was refused when attempting to connect to www.isearch.com

Info on ISearch
http://www.scanspyware.net/info/ISearchtoolbar.htm

What do you definitely need? Are you sure that it isn't there?

Well spybot and Adaware havent asked to delete anything I need, altho the process finders show things like system tray, MSN, Spybot Teatimer, Norton Antivirus etc

BTW my nortons is an older version, the last one before it started detecting spyware and stuff, thats why I used other programs with it

Block the isearch website through your windows hostfile. That will prevent you from getting it in the future. Getting it of your system if the specialist programs cannot will be tough though :S

This may help: http://securityresponse.symantec.com/avcenter/venc/data/spyware.isearch.html

I had an i-search popup on my computer that used to pop up regularly. I tried spybot, adaware, spysweeper etc, but they would either not detect it or detect it and say they removed it, but it would continue to popup.

I then got a program that said it got rid of it, but now it open firefox and loads for a second and comes up with an error message saying that it doesnt have permission to connect to i-search :confused:

Ive tried most things I can think of but its still there, anyone else have any ideas?

Edit: Any ideas short of formatting and starting again, or installing linux.
Well don’t know if this is covered … but you tried ad-aware and spybot which are two of my favs … I would recommend running a scan of hijackthis

Powerful tool

Are you doing the cleanups in Safe Mode?

And when you reboot to re-run the scan, are you booting up in Safe Mode again?

I usually stay in Safe Mode until several different products say I'm clean.

Are you doing the cleanups in Safe Mode?

And when you reboot to re-run the scan, are you booting up in Safe Mode again?

I usually stay in Safe Mode until several different products say I'm clean.
Very good procedure … easier to delete files if the associated processes are not running

2 programs that will help a bunch: Zonealarm and Panda antivirus. Panda is the most thorough anti-virus/spyware program I've used and zonealarm is a really effective free firewall. It will help stop isearch from connecting to the web. Panda only gives you one update on the trial version so I usually uninstall it after I'm done using it. You might also try running your scan in safe mode, with your ethernet cord disconnected. Also, stop using IE in the future :)

also, note adaware SE 1.06 is out now.

Good luck, and ISearch does specifically attach itself to FireFox by design.

You may also want to try counterspy (the free trail should be fine). A while back I was infected with VX2 and neither adaware nor spybot would remove it (or they would and it would reinstall itself automatically). Counterspy killed it completely.

You can get it here:
http://www.sunbelt-software.com/CounterSpy-Download.cfm

2 programs that will help a bunch: Zonealarm and Panda antivirus. Panda is the most thorough anti-virus/spyware program I've used and zonealarm is a really effective free firewall. It will help stop isearch from connecting to the web. Panda only gives you one update on the trial version so I usually uninstall it after I'm done using it. You might also try running your scan in safe mode, with your ethernet cord disconnected. Also, stop using IE in the future :)
If you are looking for a GOOD firewall (free) try sygate personal or kerio (formerly tiny)

Zone alarm is fine though

(Options I have to give to kerio and sygate is right behind it but Is the more powerful firewall (also less system intensive then Zone or Kerio))

If Norton is old, it's useless. Either update it or get rid of it and install something else. I use AVG (http://free.grisoft.com/doc/1) and it's caught everything that ever came near my system (including stuff like iSearch).
Also WLs advice is very good. Once you have spyware/virus checkers installed and updated go to safe mode and stay there until it's sorted. (Don't install and boot back into 'normal' Windows or the evilness may disable your checkers.)