SearchAssistant

[Paul]

I keep getting the SearchAssistant Browser HiJacker when
I run the scan, even though I remove it each time. I
have also scanned in safe mode, deleted the references in
regedit, and run Hijack This, and it keeps coming back
each time I reboot. The only thing I can think of now is
torching the hard drive and starting over. Any
suggestions?

 

[Jim Byrd]

Hi Paul - Start here. Please post back with your results or if you need
additional assistance.

Courtesy of Ron Kinner MVP:


"There is a German program called Spoonweg.exe which might
help.

http://lunatic-skydance.de/mr/soft/SpoonWeg.exe

It will start to download. Save it somewhere you can find
it again then Open it and say YES then Click on Trojaner-
Suchen. If it finds the version of about:blank that it is
meant to kill it will go and do it then reboot the PC.
Otherwise it will say Trojaner Spooner wird nicht gefunden.

Another German program is SpHjFix.exe.

http://www.trojaner-info.de/cgi-bin/download.cgi?
file=sphjfix

This one speaks English so just Press on Start Disinfection
If it doesn't find its target it will say Not Infected
across the top of the little window. Otherwise follow the
instructions.

Both of these probably run better in Safe Mode (F8 -
without Networking)

Finally if both of the above fail then try one of the
methods in:

http://www.pchell.com/support/aboutblank.shtml "



I can also recommend the procedures at www.pchell.com .



In addition, for your specific Home Search Assistant parasite, try the
following (extracted from one of my "standard" posts about this family of
parasites):

"If your hijacker is Home Search Assistant or one of these:

- Only The Best
- Home Search Extender
- Shopping Wizard
- res://****.dll/index.html#***** (or simply res .dll)

first see here:
http://www.short-media.com/forum/showthread.php?p=172774#post172774, and
here: http://www.pchell.com/support/onlythebest.shtml. Then you can try AT
YOUR OWN RISK, HSRemove, free, here: http://www.hsremove.com/. "A few
days ago I got hijacked - Nothing new in that, except this time it was a
real [censored] to get rid of. - There were simply no tools available to
remove this "Home Search" thing. Finally I ended up creating my own tool for
it. USE IT AT YOUR OWN RISK. And if you find it helpful, then please do not
hesitate to make a contribution."

Or, you can try AboutBuster, here, which is also designed to remove Home
Search Assistant: http://www.malwarebytes.biz/"


--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In

 

[itgirl]

Check your Add/Remove programs and make sure that you
don't have any toolbar programs. If you do, remove these
and scan again.

 

[Paul]

Not having much luck with these. My issue is identified
as Internet Explorer SearchAssistant, so I don't know if
that is different than Home SearchAssistant.

-----Original Message-----
Hi Paul - Start here. Please post back with your results or if you need
additional assistance.

Courtesy of Ron Kinner MVP:


"There is a German program called Spoonweg.exe which might
help.

http://lunatic-skydance.de/mr/soft/SpoonWeg.exe

It will start to download. Save it somewhere you can find
it again then Open it and say YES then Click on Trojaner-
Suchen. If it finds the version of about:blank that it is
meant to kill it will go and do it then reboot the PC.
Otherwise it will say Trojaner Spooner wird nicht gefunden.

Another German program is SpHjFix.exe.

http://www.trojaner-info.de/cgi-bin/download.cgi?
file=sphjfix

This one speaks English so just Press on Start Disinfection
If it doesn't find its target it will say Not Infected
across the top of the little window. Otherwise follow the
instructions.

Both of these probably run better in Safe Mode (F8 -
without Networking)

Finally if both of the above fail then try one of the
methods in:

http://www.pchell.com/support/aboutblank.shtml "



I can also recommend the procedures at www.pchell.com .



In addition, for your specific Home Search Assistant parasite, try the
following (extracted from one of my "standard" posts about this family of
parasites):

"If your hijacker is Home Search Assistant or one of these:

- Only The Best
- Home Search Extender
- Shopping Wizard
- res://****.dll/index.html#***** (or simply res .dll)

first see here:
http://www.short-media.com/forum/showthread.php? p=172774#post172774, and
here: http://www.pchell.com/support/onlythebest.shtml. Then you can try AT
YOUR OWN RISK, HSRemove, free, here:

http://www.hsremove.com/. "A few

days ago I got hijacked - Nothing new in that, except this time it was a
real [censored] to get rid of. - There were simply no tools available to
remove this "Home Search" thing. Finally I ended up creating my own tool for
it. USE IT AT YOUR OWN RISK. And if you find it helpful, then please do not
hesitate to make a contribution."

Or, you can try AboutBuster, here, which is also designed to remove Home
Search Assistant: http://www.malwarebytes.biz/"


--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In

I keep getting the SearchAssistant Browser HiJacker when
I run the scan, even though I remove it each time. I
have also scanned in safe mode, deleted the references in
regedit, and run Hijack This, and it keeps coming back
each time I reboot. The only thing I can think of now is
torching the hard drive and starting over. Any
suggestions?

.

 

[Jim Byrd]

It's the same, Paul. Try the other stuff I mentioned - especially HSRemove
and AboutBuster. Read the stuff at PCHell carefully first about how to use
these to eliminate this particular parasite.

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In

Not having much luck with these. My issue is identified
as Internet Explorer SearchAssistant, so I don't know if
that is different than Home SearchAssistant.

-----Original Message-----
Hi Paul - Start here. Please post back with your results or if you
need additional assistance.

Courtesy of Ron Kinner MVP:


"There is a German program called Spoonweg.exe which might
help.

http://lunatic-skydance.de/mr/soft/SpoonWeg.exe

It will start to download. Save it somewhere you can find
it again then Open it and say YES then Click on Trojaner-
Suchen. If it finds the version of about:blank that it is
meant to kill it will go and do it then reboot the PC.
Otherwise it will say Trojaner Spooner wird nicht gefunden.

Another German program is SpHjFix.exe.

http://www.trojaner-info.de/cgi-bin/download.cgi?
file=sphjfix

This one speaks English so just Press on Start Disinfection
If it doesn't find its target it will say Not Infected
across the top of the little window. Otherwise follow the
instructions.

Both of these probably run better in Safe Mode (F8 -
without Networking)

Finally if both of the above fail then try one of the
methods in:

http://www.pchell.com/support/aboutblank.shtml "



I can also recommend the procedures at www.pchell.com .



In addition, for your specific Home Search Assistant parasite, try
the following (extracted from one of my "standard" posts about this
family of parasites):

"If your hijacker is Home Search Assistant or one of these:

- Only The Best
- Home Search Extender
- Shopping Wizard
- res://****.dll/index.html#***** (or simply res .dll)

first see here:
http://www.short-media.com/forum/showthread.php?
p=172774#post172774, and here:
http://www.pchell.com/support/onlythebest.shtml. Then you can try AT
YOUR OWN RISK, HSRemove, free, here:

http://www.hsremove.com/. "A few

days ago I got hijacked - Nothing new in that, except this time it
was a real [censored] to get rid of. - There were simply no tools
available to remove this "Home Search" thing. Finally I ended up
creating my own tool for it. USE IT AT YOUR OWN RISK. And if you
find it helpful, then please do not hesitate to make a contribution."

Or, you can try AboutBuster, here, which is also designed to remove
Home Search Assistant: http://www.malwarebytes.biz/"


--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In

I keep getting the SearchAssistant Browser HiJacker when
I run the scan, even though I remove it each time. I
have also scanned in safe mode, deleted the references in
regedit, and run Hijack This, and it keeps coming back
each time I reboot. The only thing I can think of now is
torching the hard drive and starting over. Any
suggestions?

.