How PERMANANTLY Stop auto.search.msn.com

[DocGriff]

MS Antispyware keeps flagging the following:
"Host file redirection of 1089288654 auto.search.msn.com"
as a High Risk issue. I have "removed" it via the software
but it keeps showing back up.
I'm not a newbie to pc's, just this arena.
What the heck is this? Is it in the Registry? How do I
permanantly get rid of it?

Thanks for any info.
DocGriff

 

[Engel]

Please submit a suspected spyware report to spynet. (tools-

submit suspected spyware report).

Feel free to say what you've got in place and have tried,
and that it didn't work.

Once that has completed, please reboot into safe mode
logged in as administrator
and run a full AntiSpyware scan.
(open Microsoft AntiSpyware, on the scan page choose Scan
options > Full System Scan (check the boxes below) >
click "Run Scan Now" ) scan with the latest signatures to
see if that helps.
It is also important to do a full virusscan with an
updated antivirusprogram in Safe Mode
Apply the same principles with the following AntiSpyware
solutions in safe mode:
Spy Sweeper - www.webroot.com
Spybot - http://www.safer-networking.org/
CWShredder -
http://www.intermute.com/products/cwshredder.html
Ad-Aware - www.lavasoftusa.com

 

[AndyManchesta]

Hi Doc ,

Can you check this link and let me know if it doesnt
solve the problem

http://securityresponse.symantec.com/avcenter/venc/data/pf
/adware.searchcounter.html


You will need to reset the hosts file i suggest using
Hoster 1.6 from Toadbee then simply press 'Restore
Original Hosts' after you have removed the entries for
this.

You can get hoster from here if needed :

http://andymanchesta.com/Downloads2/hoster.zip


If Symantecs advise doesnt fix the problem use Hijack
this and i will try help out more,If you use Hijack this
check for any 01,F1,010 or 015 entries as these would be
malicious in most cases unless you have added items to
your hosts file and added sites to your trusted zone,

Hijack This :

http://www.spywareinfo.com/~merijn/files/hijackthis.zip

If Hijack This is needed create a folder on c/drive or
desktop by right clicking a empty space then choose new
then folder,Name it and save Hijack this into it.This way
it will make back ups of anything you delete and its much
safer to use it once its in a folder.When running
HijackThis note that most of what it finds will be
essential so double check anything you want to delete to
confirm its not a genuine file first.

Theres a few sites you can copy & paste your hijack this
logs to and get instant results but please be carefull
when using these sites as ive seen them miss items and
even flag genuine entries as nasty but its a good
starting point to show what area's you need to look at
more:


http://www.hijackthis.de/en

http://hjt.iamnotageek.com/

http://www.help2go.com/modules.php?name=HJTDetective


Good Luck


Andy Manchesta

 

[DocGriff]

Thanks Andy..... I will try it and get back with you.