How do I get rid of Cydoor and stop Browser Hijacking

[Tina]

Cydoor Adware gets picked up every time and the
MSAS/AntiSpyware Beta1 says it removes it but all I have to
do restart the computer and it is back.

Also, under advanced tools - Browser restore, my default
settings for my browser search bar keeps changing as well
as the System Explores IE Settings. I continue to get a a
"Possible Browser Hijack" with each scan but this too never
permanently goes away even though I tell the Spyware Scan
to remove it.

Why would the scan detect it, say it removed it, when it
did not? I tried to send a report but rceived an error
message.

 

[plun]

Cydoor Adware gets picked up every time and the
MSAS/AntiSpyware Beta1 says it removes it but all I have to
do restart the computer and it is back.

Also, under advanced tools - Browser restore, my default
settings for my browser search bar keeps changing as well
as the System Explores IE Settings. I continue to get a a
"Possible Browser Hijack" with each scan but this too never
permanently goes away even though I tell the Spyware Scan
to remove it.

Why would the scan detect it, say it removed it, when it
did not? I tried to send a report but rceived an error
message.

Hi

Try this :

- Download/Install CCleaner, www.ccleaner.com

- Download/Install Lavasofts Adaware

http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022-10319876.html?tag=list

* Also watch the video from Cnet about Adware within page
for best result.*

- Download Winsockfix, just a precaution if you loose your LSP.
http://www.tacktech.com/display.cfm?ttid=257

- Restart in *safe mode*, press F8 during reboot

- Run CCcleaner and remove all temporarily junk.

- Run Adaware

- Run MSAS

- Restart

 

[Ron Kinner]

Get HijackThis.exe from
http://tomcoyote.org/hjt/hjt199//HijackThis.exe

Save it to C:\hjt (new folder) then Open it and select
Scan and Save Log. Note where you saved the log then
send it to me as an attachment. I can probably tell you
what to do to get rid of it.

Ron Kinner
Microsoft MVP 2004 & 2005
(e-mail address removed)