Browser Hijacker won't go away

[Gerald]

Hi,

I've just recently installed MSAS beta and found some
spyware on my XP Pro machine.

Unfortunately, one broswer hijacker (www.aaawebsearch.com)
won't go away. I've done 2 re-scans and each time found it
on my PC. It keeps coming back after each removal and
restart.

It would be appreciated if someone could advise me what to
do.

Thanks.

 

[Danny Kile]

Hi,

I've just recently installed MSAS beta and found some
spyware on my XP Pro machine.

Unfortunately, one broswer hijacker (www.aaawebsearch.com)
won't go away. I've done 2 re-scans and each time found it
on my PC. It keeps coming back after each removal and
restart.

It would be appreciated if someone could advise me what to
do.

Thanks.

Have you tried to do the scan from a safe mode boot?

 

[Ron Kinner]

Get HijackThis.exe from
http:/www.tomcoyote.com/hjt/HijackThis.exe

Save it then Open it and SCAN your system then SAVE LOG
and send me the HijackThis log as an attachment. You can
try just copying it and pasting it into a reply but I
might not see it. I should be able to identify the
problem and tell you how to get rid of it for good.

Ron Kinner MVP

rkinner AT att DOT net
" AT " = "@"
" DOT " = "."

 

[cyberwil]

-----Original Message-----
Hi,

I've just recently installed MSAS beta and found some
spyware on my XP Pro machine.

Unfortunately, one broswer hijacker (www.aaawebsearch.com)
won't go away. I've done 2 re-scans and each time found it
on my PC. It keeps coming back after each removal and
restart.

It would be appreciated if someone could advise me what to
do.

Thanks.
.

I suggest you use about 3 antispyware utilities on your
computer purely for the fact that one utility can detect
and remove spyware traces that others find troublesome
to detect or remove. try downloading spybot search &
destroy and adaware se v1.05. both these utilities are
freeware and can be downloaded from softpedia.com or
download.com. this should beef up your antispyware
arsenal. the only downside is these utilities do not have
real-time protection but i think MS antispyware Beta
should be sufficient to warn you when those critters are
detected running in your system or changing your system
settings. and finally update your software regularly to
keep it up to date. I hope this is helpfull to you i'm
sure if you use the other utilities i told you about your
problems should be solved. good luck i the war against
this spyware scum

 

[Guest]

I scanned and let the spyware set my home page to
MSN.com. I then changed it myself to what I want it to
be and I keep getting a message that a hijacker switched
my home page.

I changed it back, scanned, restarted, scanned again and
got no warning about a hijacker.

So, I changed it myself again to the homepage "I" want
and not what Microsoft wants. Rescanned and guess what.
My browser was hijacked again by that malicious person -
myself - who doesn't really give a crap about MSN.com.

My two cents on the subject.

 

[Danny Kile]

I scanned and let the spyware set my home page to
MSN.com. I then changed it myself to what I want it to
be and I keep getting a message that a hijacker switched
my home page.

I changed it back, scanned, restarted, scanned again and
got no warning about a hijacker.

So, I changed it myself again to the homepage "I" want
and not what Microsoft wants. Rescanned and guess what.
My browser was hijacked again by that malicious person -
myself - who doesn't really give a crap about MSN.com.

My two cents on the subject.

<Snippit>

In MS A/S click on Advance Tools (the one that looks like two gears),
from there click on Browser Hi-jack Restore. At this point you are given
a list the first one should be Start Page it shows the current setting
and the setting that it will be restored to. Click this line just to
high light it and then in the lower right hand corner of the display is
a setting "Change restore setting to new URL..." Click it. A box will
pop up with "http://msn.com" in it, change this to whatever you would
like your home page to be, then click ok. Then at the bottom center of
the page click the Check All Option and then click the Restore bottom,
you should be done.


Danny

 

[Bill Sanderson]

The UI on the browser hijack detection is confusing, and maybe simplistic as
well.

When you install the program, you should have been given an opportunity to
set the defaults you want into the program.

You can set them at Tools, advanced tools, browser hijack settings restore.

You want to set the first and third items to your desired home page
settings.

The product is getting a lot of flak for resetting the page to MSN. I can't
fault folks for being annoyed, but that is the default setting for the OS,
as installed, so it seems a reasonable setting for the application to take
in the absence of instruction from the user.