Service Request Ticket - # 19653

Service Request Information

CONTACT Name Bullis, Lori   View open tasks   View tasks from last 30 days   Schedule Change Contact Date Mar 08, 2007 09:36 AM
Department Library & Media Services Phone 88884
Location Email bullisl@wou.edu Request for more information Send 'Keeping in touch' email Send 'I'm thinking of you' email

SR INFO Type WOU #
Priority Equipment Type
Status Flagged
Description

Computer Edit WOU # 20020709[Edit Inv] (opens in a new window) Bldg/Room OFF
Service Tag Description Dimension 4600, P4-2.80GHz
Serial No. 9C55X21 Location PDR

CPU Pentium 4-2.80Ghz


OS Unknown Software Microsoft XP Pro from old cpus P0032877, Adobe Photoshop, Macromedia Dreamweaver

Wired NIC 00:07:E9:77:B3:96


TECHS Submitted by Jonathan Guillen Contact jguille@wou.edu 88925
Primary Technician Contact morr@wou.edu 88925

Tracking

Entered by Date Memo
Michael Orr
Email

Public

Entered by Date Memo
Michael Orr Mar 15, 2007 09:28 AM
The ISearchTech.ysb file is evidently a leftover
registry entry from AOL Toolbar for IE. The
toolbar itself has been uninstalled, but the
registry entry is still there. I was unable to
remove it, but the system is no longer throwing
errors and memory usage seems normal.

We may still need to ghost this machine or maybe
install more memory in the future to avoid these
types of problems. The librarians seem to like to
run a great many programs at once as well as
remote desktop connection to their regular office
machines.
Add Attachment
Michael Orr Mar 15, 2007 08:46 AM
Task reassigned to Michael Orr.
Add Attachment
Michael Orr Mar 15, 2007 08:46 AM
Heading over. Evidently making sure that system
files are shown then rebooting into safemode and
scanning with spybot is supposed to remove this.
I'm going to try that again and see if I can get
anywhere with it.
Add Attachment
Michael Orr Mar 08, 2007 10:06 AM
The problem seems to be caused by spyware. 
ISearchTech.ysb is the spyware that's installed. 
Research through google shows that this thing is 
one tough sonofa to get rid of. Maybe we should 
just ghost the box?

This is the reference desk workstation. Needs to 
be functional but this problem is occuring for 
multiple users because this spyware is eating up 
the virtual memory.
Add Attachment
Michael Orr Mar 08, 2007 09:49 AM
Task reassigned to Michael Orr.
Add Attachment
Michael Orr Mar 08, 2007 09:49 AM
Heading over to take a look at the machine.
Add Attachment
Jonathan Guillen Mar 08, 2007 09:37 AM
She is working at the Reference desk currently 
and can be reached at 88881. After clicking 
through error dialog boxes, she can still acess 
some applications, like IE, but none of her 
network drives are mapped. She is also not able 
to remotely connect to her office PC from this 
computer: "Unable to connect, low virtual 
memory." But when she remotely connects from a 
different computer, all is well.
Add Attachment