looking for solution for problem of "mysearchnow.com"

  • Thread starter Thread starter Alegro
  • Start date Start date
A

Alegro

I believe my browser was highjacked from this search site
after i installed MSN messenger Plus!.

There is a program called birdclockarmy.exe (it's in
C:\DOCUME~1\user name\APPLIC~1\axisbin\birdclockarmy.exe)
keeps requesting to change the default page to following
garbage.

"HKCU\Software\Microsoft\Internet Explorer\Main,Search
Bar =
http://www.sfowdznavltpybskj.net/RaZUhT5WLl5XrD71mKqJVedtX
tqjoXOtsLBMEDtkWGukqiupcbE8UyFWWSLz6GZI.html


HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar
=
http://ktbazcessiexnulwvsmvxtjbg.com/RaZUhT5WLl5XrD71mKqJV
edtXtqjoXOtsLBMEDtkWGvUfbQauWgzgyFWWSLz6GZI.html"


I tried
- uninstall msn messenger plus!
- spybot,
- Microsoft AntiSpyware
- highjackthis
- Lavasoft Ad-Ware
etc... nothing works.

I also tried to remove this file and whole folder,
C:\DOCUME~1\user name\APPLIC~1\axisbin\birdclockarmy.exe

But it comes back later even without a reboot.

Any idea??!!
Need help!!!!
 
Get HijackThis from

You installed the MessengerPlus3 spywaresponser called lop.

http://tomcoyote.org/hjt/hjt199//HijackThis.exe

and let it Scan your system and Save Log. (Save it where
you can find it again.) submit your HijackThis log files
to any of the below Forums for expert analysis.
Note that all Forums require Registration prior to posting

(http://aumha.net/viewforum.php?f=30)
(http://www.bleepingcomputer.com/forums/forum22.html)
(http://castlecops.com/forum67.html)
(http://forums.maddoktor2.com/index.php?showforum=17)
(http://www.spywarewarrior.com/viewforum.php?f=2)
(http://forums.spywareinfo.com/index.php?showforum=18)
(http://www.wilderssecurity.com/forumdisplay.php?f=24)
(http://boards.cexx.org/viewforum.php?f=1)
(http://www.malwarebytes.biz/forums/index.php?showforum=5)
(http://forum.gladiator-antivirus.com/index.php)
(http://www.dslreports.com/forum/security)

--
Andre
Extended64 | http://www.extended64.com
Blog | http://www.extended64.com/blogs/andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm
 
Back
Top