How did the iSearch toolbar install automatically? - Tilted Forum Project Discussion Community

rubicon · 05-28-2004, 09:37 AM

Has anyone had the iSearch toolbar automatically install on IE 6? I was surfing some very benign sites and suddently this new toolbar appeared in IE.

What's interesting is that I was _never_ prompted to install anything. I've got my IE settings locked down tight to avoid problems like that but it got through.

SpyBot didn't detect it but I found an uninstall application which removed it from my system.

A friend had the same thing happen to him - iSearch automatically installed.

Anyone know how this happened?

(Please, no comments like "that's what you get for running IE" or "use FireFox instead" or "hey, that doesn't affect Linux". TIA)

sailor · 05-28-2004, 10:35 AM

Well, even though its one of the responses you dont want... "Thats what you get for running IE." IE's lax ActiveX controls, and the abundance of exploits for the software make it easy for stuff like that to automatically install itself off of websites. You said you dont want to hear it, but IE is the reason.

However, you can do something about it: Go into settings (tools >> internet options, or something along those lines... its been a while) and look in the security settings. Up the security level and disable ActiveX controls.

Mondak · 05-28-2004, 01:45 PM

http://www.tfproject.org/tfp/showthr...threadid=48137

Fearless_Hyena · 05-30-2004, 04:38 PM

Don't forget to keep current with Windows Update! Most common exploits are fixed by Critical Updates.

punx1325 · 05-30-2004, 04:46 PM

The same thing happened to my parents computer, I went the route of reformatting after hours of trying to dig all its shit that it installed.

powerclown · 05-30-2004, 04:47 PM

This happened to me last week, iSearch toolbar, iSearch the default homepage in IE, iSearch in the right-click menu, general pain in the ass. No warnings or prompts.

Read what Mondak posted above. I was able to successfully remove all the iSearch crap through a combination of SpyBot S&D and CWSShredder. Good Luck.

rubicon · 05-31-2004, 04:08 PM

What's interesting is that I was up-to-date on all critical updates and patches, I don't allow _any_ ActiveX control to run without granting explicit permission.

I just looked, and while I had "prompt" for most ActiveX settings, I didn't for all of them. I thought the others were dependent on the first ones (being Prompt) but I guees not.

Thanks for the replies. And yes, IE is...well IE. (sigh)

MSD · 06-01-2004, 07:43 AM

AcitveX force-feeding. I'll dig up the article and proof-of-concept if I get a chance. Basically, a site throws a file into your temp directory, and ActiveX controls run the installer silently right out of your temp folder.

05-28-2004, 09:37 AM	#1 (permalink)
rubicon Stop. Think. Question. Location: Redondo Beach, CA	How did the iSearch toolbar install automatically? Has anyone had the iSearch toolbar automatically install on IE 6? I was surfing some very benign sites and suddently this new toolbar appeared in IE. What's interesting is that I was _never_ prompted to install anything. I've got my IE settings locked down tight to avoid problems like that but it got through. SpyBot didn't detect it but I found an uninstall application which removed it from my system. A friend had the same thing happen to him - iSearch automatically installed. Anyone know how this happened? (Please, no comments like "that's what you get for running IE" or "use FireFox instead" or "hey, that doesn't affect Linux". TIA) __________________ How you do anything is how you do everything.

05-28-2004, 10:35 AM	#2 (permalink)
sailor beauty in the breakdown Location: Chapel Hill, NC	Well, even though its one of the responses you dont want... "Thats what you get for running IE." IE's lax ActiveX controls, and the abundance of exploits for the software make it easy for stuff like that to automatically install itself off of websites. You said you dont want to hear it, but IE is the reason. However, you can do something about it: Go into settings (tools >> internet options, or something along those lines... its been a while) and look in the security settings. Up the security level and disable ActiveX controls. __________________ "Good people do not need laws to tell them to act responsibly, while bad people will find a way around the laws." --Plato

05-28-2004, 01:45 PM	#3 (permalink)
Mondak Industrialist Location: Southern California	http://www.tfproject.org/tfp/showthr...threadid=48137 __________________ All truth passes through three stages: First it is ridiculed Second, it is violently opposed and Third, it is accepted as self-evident. ARTHUR SCHOPENHAUER (1788-1860)

05-30-2004, 04:46 PM	#5 (permalink)
punx1325 Junkie Location: San Diego	The same thing happened to my parents computer, I went the route of reformatting after hours of trying to dig all its shit that it installed. __________________ If something seems too good to be true, then it probably is....

05-31-2004, 04:08 PM	#7 (permalink)
rubicon Stop. Think. Question. Location: Redondo Beach, CA	What's interesting is that I was up-to-date on all critical updates and patches, I don't allow _any_ ActiveX control to run without granting explicit permission. I just looked, and while I had "prompt" for most ActiveX settings, I didn't for all of them. I thought the others were dependent on the first ones (being Prompt) but I guees not. Thanks for the replies. And yes, IE is...well IE. (sigh) __________________ How you do anything is how you do everything.

05-30-2004, 04:38 PM	#4 (permalink)
Fearless_Hyena Hello, good evening, and bollocks. Location: near DC	Don't forget to keep current with Windows Update! Most common exploits are fixed by Critical Updates.

05-30-2004, 04:47 PM	#6 (permalink)
powerclown Junkie Location: Detroit, MI	This happened to me last week, iSearch toolbar, iSearch the default homepage in IE, iSearch in the right-click menu, general pain in the ass. No warnings or prompts. Read what Mondak posted above. I was able to successfully remove all the iSearch crap through a combination of SpyBot S&D and CWSShredder. Good Luck.

06-01-2004, 07:43 AM	#8 (permalink)
MSD The sky calls to us ... Super Moderator Location: CT	AcitveX force-feeding. I'll dig up the article and proof-of-concept if I get a chance. Basically, a site throws a file into your temp directory, and ActiveX controls run the installer silently right out of your temp folder.