Member Avatar for j4s[p]

Hi, I was wondering if you could help me with this problem I have. (I'm running XP) There's this "Search Assistant" thing on my toolbar and whenever I uncheck it... it comes back next startup. :(

Image:

I've tried deleting in My Programs directory but I couldn't find it, I used Spybot-S&D (with all updates) on it too and it didn't pick it up.

Thanks,
j4s[p]

  • 3 Contributors
  • 2 Replies
  • 97 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by DMR

Dani AI

Generated

As moved this to the malware forum and suggested, the fastest way to get a reliable fix is to gather diagnostic logs and then target the component that keeps re-enabling itself. Toolbars that return after being disabled are normally installed so something on startup or inside Internet Explorer will re-add them (browser helper object, IE toolbar/extension entry, a Run registry key, a scheduled task or service).

Practical checklist to follow before deleting anything:

  • Make a System Restore point and export any registry keys you will change. Never remove registry entries without a backup.
  • Produce a HijackThis (or Autoruns) report and save it. When helpers ask for the log, include the full output and your OS/IE version. Do not use the HJT "Fix" button unless someone experienced tells you exactly which lines to remove.
  • Use Autoruns (or examine HKLM/HKCU Run and RunOnce keys) and the Internet Explorer add-on lists to locate the offending file and exact path. Look for unknown publishers, random GUID names, or DLLs located outside Program Files.
  • If you find the file path, disable the entry first (Autoruns can uncheck it). Reboot. If the toolbar stays gone, remove the file and then clean the registry entry.

Key places to inspect: browser helper objects, IE toolbars/extensions, the Run keys under HKLM and HKCU, scheduled tasks and services. If manual removal is unclear, post the full HijackThis/Autoruns output and note what you tried. Helpers will identify the offending lines and give the exact safe removal steps.

Recommended Answers

All 2 Replies

Member Avatar for caperjack

Hi, I was wondering if you could help me with this problem I have. (I'm running XP) There's this "Search Assistant" thing on my toolbar and whenever I uncheck it... it comes back next startup. :(

Image:

I've tried deleting in My Programs directory but I couldn't find it, I used Spybot-S&D (with all updates) on it too and it didn't pick it up.

Thanks,
j4s[p]

Go on over to the Spyware /virus section of this fourm and read the pinned topic on posting a hijackthis log .
Here

Member Avatar for DMR

As this is definitely a malware issue, I've moved this thread to the appropriate forum.

j4s[p],

Have a read through these previous threads on some of the "Search Assistant"-related problems. Try some of the suggestions given and repost here if you have any questions:

http://www.daniweb.com/techtalkforums/search.php?searchid=225396

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.