How did the iSearch toolbar install automatically?
 

Has anyone had the iSearch toolbar automatically install on IE 6? I was surfing some very benign sites and suddently this new toolbar appeared in IE.

What's interesting is that I was _never_ prompted to install anything. I've got my IE settings locked down tight to avoid problems like that but it got through.

SpyBot didn't detect it but I found an uninstall application which removed it from my system.

A friend had the same thing happen to him - iSearch automatically installed.

Anyone know how this happened?

(Please, no comments like "that's what you get for running IE" or "use FireFox instead" or "hey, that doesn't affect Linux". TIA)

Well, even though its one of the responses you dont want... "Thats what you get for running IE." IE's lax ActiveX controls, and the abundance of exploits for the software make it easy for stuff like that to automatically install itself off of websites. You said you dont want to hear it, but IE is the reason.

However, you can do something about it: Go into settings (tools >> internet options, or something along those lines... its been a while) and look in the security settings. Up the security level and disable ActiveX controls.

Don't forget to keep current with Windows Update! Most common exploits are fixed by Critical Updates.

The same thing happened to my parents computer, I went the route of reformatting after hours of trying to dig all its shit that it installed.

This happened to me last week, iSearch toolbar, iSearch the default homepage in IE, iSearch in the right-click menu, general pain in the ass. No warnings or prompts.

Read what Mondak posted above. I was able to successfully remove all the iSearch crap through a combination of SpyBot S&D and CWSShredder. Good Luck.

What's interesting is that I was up-to-date on all critical updates and patches, I don't allow _any_ ActiveX control to run without granting explicit permission.

I just looked, and while I had "prompt" for most ActiveX settings, I didn't for all of them. I thought the others were dependent on the first ones (being Prompt) but I guees not.

Thanks for the replies. And yes, IE is...well IE. (sigh)

AcitveX force-feeding. I'll dig up the article and proof-of-concept if I get a chance. Basically, a site throws a file into your temp directory, and ActiveX controls run the installer silently right out of your temp folder.