Spyware, adware etc.... Must be Microsoft or Symantec

[Guest]

My browser has been hijacked for two weeks now by the same site; mkMSITStore:C:\WINDOWS\start.chm::/spplain.htm

I have downloaded, installed and correctly used the following: Spyhunter, Spybot, CWShredder, HijackThis and Ad-Aware
They all work well in identifying and removing the hijackers
The problem is that when I perform a Norton update for virus definitions, or Microsoft Windows update, upon opening the browser the hijackers are there waiting
Could there be an issue with the download
Could there be an issue with shared components , dll's, activex's etc..
It is too coincidental that the hijackers reappear after downloading virus definitions or windows update
I rarely download over the internet
Now I have extra cookie and history folders in the Temp folder
Any comments by Microsoft Representatives are most welcome
Thank you

 

[Carey Frisch [MVP]]

Home Page Setting Changes Unexpectedly, or You Cannot Change Your Home Page Setting
http://support.microsoft.com/default.aspx?scid=kb;en-us;320159&Product=ie600

3 Steps to Help Ensure your PC is Protected
http://www.microsoft.com/security/protect/

Bazooka Adware and Spyware Scanner 1.12
http://download.com.com/3000-2144-10247783.html

IE-SPYAD is a Registry file (IE-ADS.REG) that adds a long list of sites and domains associated
with known advertisers, marketers, and crapware pushers to the Restricted sites zone of Internet Explorer.
Once this list of sites and domains is "merged" into your Registry, most marketers, advertisers, and
crapware pushers on the Net will not be able to use cookies, ActiveX controls, Java applets, or scripting
to compromise your privacy or your PC while you surf the Net. Nor will they be able to use your browser
to push unwanted pop-ups, cookies, or auto-installing programs on you.

Visit: http://www.staff.uiuc.edu/~ehowes/resource.htm#IESPYAD


Consider purchasing and installing a good internet security program:
http://www.symantec.com/sabu/nis/nis_pe/features.html


--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

--------------------------------------------------------------------------------------------------------


| My browser has been hijacked for two weeks now by the same site;
mkMSITStore:C:\WINDOWS\start.chm::/spplain.html
|
| I have downloaded, installed and correctly used the following: Spyhunter, Spybot, CWShredder, HijackThis and
Ad-Aware.
| They all work well in identifying and removing the hijackers.
| The problem is that when I perform a Norton update for virus definitions, or Microsoft Windows update, upon
opening the browser the hijackers are there waiting.
| Could there be an issue with the download?
| Could there be an issue with shared components , dll's, activex's etc..?
| It is too coincidental that the hijackers reappear after downloading virus definitions or windows update.
| I rarely download over the internet.
| Now I have extra cookie and history folders in the Temp folder.
| Any comments by Microsoft Representatives are most welcome.
| Thank you.
|

 

[Janitor Boy Jr]

My browser has been hijacked for two weeks now by the same site; mkMSITStore:C:\WINDOWS\start.chm::/spplain.html

look for start.chm and/or start.htm in you windows folder.
delete it/them.
also look for notepad.exe.bat delete it and notepad.exe, allowing
windows to replace notepad.exe from system32\dll cache.
then check your shortcuts for notepad and media player.
if either is dead, you'll need to rebuild the shortcut. if the media
player link is dead install a fresh copy(of media player).
go back and double check for start.chm and start.htm. delete again if
they returned.
run cwshredder and hijack this again.
go into the registry and search for mkMSITStore and delete it all.
reboot and look for start.chm and/or start.htm again.


google is your friend -> mkMSITStore:C:\WINDOWS\start.chm
lots and lots of reading on that one.

also, stay away from the porno sites. ;-)