Yes, Another Hijacked browser- VERY nasty

From: Steve (anonymous_at_discussions.microsoft.com)
Date: 05/18/04 

Date: Mon, 17 May 2004 17:48:23 -0700

Okay, I know, I know, here are many posts on hijacked
browsers, but I can't find a resolution.

Windows XP Home- IE6

Had Norton, and it didn't pick up anything. Downloaded
Spybot search and destroy and it found a bunch of stuff,
but my browser was still hijacked, with an additional
menu system. Downloaded Ad-aware and it found tons of
stuff, still have browser hijacking. It finds the
registry problems with the bad registry for the IE search
info. It inserts a entry into the registry named "search
bar" as well.

Ad-aware didn't fix it, but it finds the bad registry
info. When I delete the entries, within minutes, it's
back to where it was.

I then went and bought McAfee Internet Security Suite,
installed it, ran Virus scan, and their anti-spyware
programs. Found nothing.

Installed spyware blaster- didn't fix it.

Installed cws shredder - didn't fix it.

Installed hijackthis - didn't fix it.

I can see everything happening in the registry, but I
can't figure out where it's coming from.

I did a clean boot, started turning services on and it
came back up when I turned system services on.

Any idea how to find out what's causing this? Also, I
notice my lsass file is all capital letters, where it's
not capitals on my laptop. Does this mean anything?

Thanks-

Relevant Pages

  • Yes, Another Hijacked browser- VERY nasty
    ... >stuff, still have browser hijacking. ... >registry problems with the bad registry for the IE ... >Installed spyware blaster- didn't fix it. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: spam and browser hijacking
    ... CWShredder (fix all found) ... What You Should Know About Spyware ... i cannot set my browser back to what i ... >>> helps with browser hijacking and deleting spyware etc. ...
    (microsoft.public.windowsxp.general)
  • Re: Trojan Horse = BackDoor.Agent.BA + Startpage
    ... This advice covers three types of home page locking - hijacking (by web ... If you are using Spybot S&D, check your 'immunize' settings which may be ... There is a clever little shareware programme that can help stop your home ... The locking is done using registry settings as per the ...
    (microsoft.public.security.virus)
  • Re: CrushEm2.0 & PuzzlEm1.0
    ... This advice covers three types of home page locking - hijacking (by web ... hijacking and locking (by ISPs when you install their ... The locking is done using registry settings as per the ...
    (microsoft.public.security)
  • Re: IE6 browser identification .NET CLR 1.1.4322
    ... > more hijacking by adware/spyware? ... Dealing with Unwanted Malware, Parasites, Toolbars and Search Engines ... > browser identification line. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)