iSearch "Desktop Search" hijacker cannot remove

Discussion in 'Malware Help (A Specialist Will Reply)' started by Higgins82, Feb 24, 2005.

  1. Higgins82

    Higgins82 Private E-2

    I have been through the "DO NOT POST UNTIL YOU HAVE READ THIS: How to: Spyware, Trojan And Virus Removal" instructions and I still can't get rid of the desktop search toolbar. Any suggestions I have tried all the removal systems in the thread posted above. Thanks
    here is the hijack log:
    O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
    O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe
     
  2. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    First:
    Be sure System Restore is disabled if running WinME or WinXP.

    Second:

    Download Kaspersky Anti-Virus Personal 5.0
    as it cleans this thoroughly + much of the crap that comes with it!! This version is a 30 day trial.


    You should print this out for reference!

    You must disable any resident AV programs you have and install KAV 5.0.
    When Installing, do the following as you come to them:

    Uncheck the Operate According to Recommended Settings Box

    Uncheck the Use Real-time Protection against Network Attacks Box

    Uncheck the Use The iStreams Technology Box


    Now, allow KAV 5.0 to download and install Updates. Then, look under Settings > Configure Updater and select Extended Database > OK > Check for Updates and allow those to install.

    Then, Click Settings > Configure On-Demand Scan Settings and Set Scan Level to Maximum > Perform Recommended Action > OK

    NOW, Close ALL Programs (including KAV 5.0) and Browsers!

    Physically Disconnect from the Internet - Pull the Cable!!

    Boot to SAFE MODE

    OPEN KAV 5.0 BUT DO NOT RUN IT YET!!!

    Open Task Manager (Ctrl-Alt-Del) and RightClick explorer.exe and END IT! Don't be alarmed when all of your desktop items disappear. That is normal.

    Everything will go blank except for KAV 5.0 and Task Manager. DO NOT CLOSE THEM!!

    Now : Start a FULL SYSTEM SCAN. Click the Protection Tab and select Scan My Computer .

    This process may take HOURS . . . . LET IT RUN!

    When the Scan and Cleanup are done, go to Task Manager and select File / New Task and type explorer.

    Close KAV 5.0 and TaskManager and reboot to Normal Windows and get a fresh HijackThis Log and let us know how things look!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds