Forum Home
Press F1
 
Thread ID: 62257 2005-10-02 00:16:00 Getting rid of a tough spy... ojibwa (8968) Press F1
Post ID Timestamp Content User
392705 2005-10-02 00:16:00 I'm having a problem with some sort of spyware/adware. At the link below I found that I was not alone with this particular issue. After running Spybot Search and Destroy I get this message "ISearchTech.YSB: Settings (Registry key, fixing failed)"

forums.tomcoyote.org

I tried to use the final solution first, the one regarding using Registrar Lite and taking ownership of the registry key. I didn't understand some of what the person who solved their problem said, and didn't want to go to deep in understanding it until I got one of you to check some things out for me.

I'm not sure If you want me to post a HighJackThis log, or If I should make it an attatchment (plus I wouldn't know exactly how to do the latter.) Thanks for any help.
ojibwa (8968)
392706 2005-10-02 00:21:00 If using XP or 2000 try the ewido suite
www.ewido.net
update definitions after installation
bartsdadhomer (80)
392707 2005-10-02 01:49:00 Ewido seemed to find a bunch of stuff, but the registry key still shows up in Spybot. :badpc: :help: ojibwa (8968)
392708 2005-10-02 01:52:00 Ewido seemed to find a bunch of stuff, but the registry key still shows up in Spybot. :badpc: :help:
Manually delete the key, after backing up the registry of course
Do you have Tea Timer enabled in Spybot?
bartsdadhomer (80)
392709 2005-10-02 03:20:00 try running spybot in safe mode ............ drcspy (146)
392710 2005-10-02 09:45:00 I tried running Spybot in safemode for this problem about a week ago, I could try it again if you think it might work now, let me know.

How would I go about manually deleting the registry key? Do I do it within Spybot or do I have to go in from My Computer or some other system tool?

Since I don't know what the Tea Timer is I'm going to say no.
ojibwa (8968)
392711 2005-10-02 10:21:00 ---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------

+ Created on: 3:19:12 AM, 10/2/2005
+ Report-Checksum: D7417CC6

+ Scan result:

HKLM\SOFTWARE\Classes\Ysb.YsbObj -> Spyware.YourSiteBar : Error during cleaning
HKLM\SOFTWARE\Classes\Ysb.YsbObj.1 -> Spyware.YourSiteBar : Error during cleaning
HKLM\SOFTWARE\YourSiteBar -> Spyware.ISTBar : Error during cleaning
HKLM\SOFTWARE\YourSiteBar\Historyfiles -> Spyware.ISTBar : Error during cleaning
HKLM\SOFTWARE\YourSiteBar\Historysearch_string -> Spyware.ISTBar : Error during cleaning


::Report End
ojibwa (8968)
392712 2005-10-02 10:24:00 try rerunning the scan in safe mode beama (111)
392713 2005-10-02 18:47:00 I found this info on another forum. Your problem might not be a problem after all.
forum.misec.net
iguana (89)
392714 2005-10-03 01:48:00 Tea Timer is a part of Spybot S & D. Read all about it here. (www.safer-networking.org) mark c (247)
1 2 3 4 5 6