Variable Browser Highjack Scan

[Jim]

Whenever I run the scan, either intelligent (Oxymoron
maybe) or custom scans every time it gets to the "Variable
Browser Highjack Scan" it freezes and is not responding,
would this have anything to do with the fact I just
installed Hostsman Manager, also my Spybot S & D recently
found host redirects for coolwwwsearch.smartsearch and
mysoft ( I have teatimer active). I also use processguard,
I have tried scanning with both of these shutdown, still
same result, I ran a Highjack This Log to have a look at
the BHO's and I found nothing curious.

This was not a problem with the previous version of MS
Antispyware.

Anybody else having this problem.

 

[plun]

Well, to run Hijack This and only look for BHOs is not enough.

Also have you done any scans (Full scans) in safe mode ? Press F8
during boot/start

Before all scans remove all temporarily junk, easiest with CCleaner,
www.ccleaner.com

Tool for CWS infections:
http://housecall.trendmicro.com/ Download CWShredder

Lavasofts Adaware, standard tool for spyware removal
http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022_4-10399602.html?tag=pop

HijackThis Forums:
http://www.merijn.org/forums.html

How to use HijackThis (be careful):
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42

You can also get some "hints" about anything wrong using HijackThis.de
and paste your hijackthislog and analyze it. Note ! only hints !!!

http://www.hijackthis.de/

--
plun




Jim brought next idea :

 

[JIm]

-----Original Message-----
Well, to run Hijack This and only look for BHOs is not enough.

Also have you done any scans (Full scans) in safe mode ? Press F8
during boot/start

Before all scans remove all temporarily junk, easiest with CCleaner,
www.ccleaner.com

Tool for CWS infections:
http://housecall.trendmicro.com/ Download CWShredder

Lavasofts Adaware, standard tool for spyware removal
http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022_4-10399602.html?tag=pop

HijackThis Forums:
http://www.merijn.org/forums.html

How to use HijackThis (be careful):
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42

You can also get some "hints" about anything wrong using HijackThis.de
and paste your hijackthislog and analyze it. Note ! only hints !!!

http://www.hijackthis.de/

--
plun




Jim brought next idea :


.

I tried in safe mode and still experienced the same
problem, I have adaware, spybot and I ran those in safe
mode as well, I also used CCLeaner for files and issues, I
also use MS at work and this morning ran a scan to see the
precise point mine hangs, this one went to the variable
browser highjack scan, hung for a second then continued, so
something on my home version is causing this part of the
process to stop responding.
I also use Spywareguard, Spyblaster, I have Trend Micro
Internet 2005. I regulary run virus scans and spyware scans.
I even went so far to uninstall MS and reinstall, yet I
still get same "not responding".
I use Firefox as my default browser. Could it be any of the
IE BHO's which are showing in the place (one of the MS
Antispyware options) where you can restore them, they are
unmarked (I leave unmarked.
What in your estimation would cause the application to hang
at that precise moment, where are variable BHO's stored
that the app is trying to scan for, if I can see them I may
be able to manually remove the offending file or at least edit.


Tks

Jim

 

[plun]

Jlm formulated on onsdag :

I use Firefox as my default browser. Could it be any of the
IE BHO's which are showing in the place (one of the MS
Antispyware options) where you can restore them, they are
unmarked (I leave unmarked.
What in your estimation would cause the application to hang
at that precise moment, where are variable BHO's stored
that the app is trying to scan for, if I can see them I may
be able to manually remove the offending file or at least edit.

Hi

I am switching between Firefox and IE as default browser with no
problem
With newest MSN toolbar with tabs IE is "working" again :')

Try this:

Start MSAS main window > Advanced tools > System Explorers > IE BHOs

You can manually block or remove different BHOs and perhaps
this can solve your problem. If you remove them you can easily
install them again if you need this BHO.

Also check IE toolbars.

 

[Guest]

-----Original Message-----
Jlm formulated on onsdag : least edit.


Hi

I am switching between Firefox and IE as default browser with no
problem
With newest MSN toolbar with tabs IE is "working" again :')

Try this:

Start MSAS main window > Advanced tools > System Explorers
IE BHOs

You can manually block or remove different BHOs and perhaps
this can solve your problem. If you remove them you can easily
install them again if you need this BHO.

Also check IE toolbars.

--
plun


.
I tried Blocking the BHO's in the program (There were only

2 anyway) and I am still coming up with the same app hang
at "Variable Browser Highjack Scan", this is something the
MS AS Beta is trying to do, so what is blocking it.

I even tried to just do my documents and settings without
the c drive to speed it up (Less Files) it went along it's
merry way, then it does the shell scan and right after that
it tries to do a "Variable Browser Highjack Scan" and bingo
it hangs.
I have stopped my teatimer, I uninstalled Processguard, so
until someone who knows the scanning attributes of this
engine and can come up with an answer as to what could
block the "Variable Browser Highjack Scan" function I am
going to uninstall and rely on my Adaware and spybot and
Trend Micro as well as my System Mechanic 5 Pro spyware
detections.

I am going to stick with FF for its useability/functions,
so when MS comes out of it's Beta testing and gets it
right, then maybe I will use it again.

Tks anyway's

Jim

PS: I use Spywareblaster/Spywareguard, so I am comfortable
with what I have.

 

[Robin Walker [MVP]]

I tried Blocking the BHO's in the program (There were only
2 anyway) and I am still coming up with the same app hang
at "Variable Browser Highjack Scan", this is something the
MS AS Beta is trying to do, so what is blocking it.

I even tried to just do my documents and settings without
the c drive to speed it up (Less Files) it went along it's
merry way, then it does the shell scan and right after that
it tries to do a "Variable Browser Highjack Scan" and bingo
it hangs.

One possible reason for this is that the Security Permissions on the
particular Registry entries being scanned at this point do not permit access
by you (the current logged-in user). Perhaps because those Registry entries
were created in the first place by a different logged-in user.

 

[Guest]

-----Original Message-----

I tried Blocking the BHO's in the program (There were only
2 anyway) and I am still coming up with the same app hang
at "Variable Browser Highjack Scan", this is something the
MS AS Beta is trying to do, so what is blocking it.

I even tried to just do my documents and settings without
the c drive to speed it up (Less Files) it went along it's
merry way, then it does the shell scan and right after that
it tries to do a "Variable Browser Highjack Scan" and bingo
it hangs.

One possible reason for this is that the Security Permissions on the
particular Registry entries being scanned at this point do not permit access
by you (the current logged-in user). Perhaps because those Registry entries
were created in the first place by a different logged-in user.

--
Robin Walker [MVP Networking]
(e-mail address removed)

The only logged in user has been me from day 1, after I

set up the computer I created one account with
Administrative rights.
This was never a problem before, and it has only just
started to do this, I am wandering if it has anything to do
with the Variable Shell Scan, it is right after that that
the "Variable Browser Highjack Scan" begins and Hangs, is
my system missing something that would cause the scan at
that moment to hang, when it doesn't find soemthing that
should be there does it hang?, what are the protocals that
this particular scan needs to continue on to the next step.
Also this is the last part of the scan overall before it
hits the registry to scan that.

Any ideas???

Tks

Jim