Master Search MORE CRAP!

[Paulo2002]

Ok... I havent changed anything havent done anything about the hijack... Today i start getting redirections and even new IE windows poping up and going to random master-search pages! But i also seem to not had my start page hijacked over the last few days!

Anyone else having this/

Is there an actual fix for it all yet?

Paulo

[Paulo2002]

I also have this new little thign running! Ill try find it...

http://paulo2002.pwp.blueyonder.co.uk/access1.jpg

[classicsoftware]

Download and run the following:

Spybot (http://www.safer-networking.org/)

Adaware (http://www.lavasoft.de/support/download/)

CWS Shreader (http://www.spywareinfo.com/~merijn/downloads.html)

Run them and see if that fixes the problem.

Post back with your results

[Steve]

Paulo, I haven't heard of any reliable way to get rid of this yet. As you know, access.exe is the file that is downloaded by the bogus removal tool. You probably should hunt down that file and kill it. End the process in task manager and go find it. If you can't kill it, try safe mode.

[Paulo2002]

I have the remove tool downloaded to my desktop but i have NEVER ran it... So i dont see whats going on! Unless and i highly doubt it i ran it by mistake once... BUT i highly highly doubt that.

[jabarnutcase]

From what I can tell, the latest "Band Aid", (but not a permanent fix), was found by Budfred in the post below. (Also read shanmuga's post below that one)


I'm assuming you have the start.chm hijack and did try downloading the "bogus removal tool"? (as Steve so aptly put it) (access.exe )

I'm sure you also know that one of the Microsoft Critical updates released recently prevents the problem, but does little to get rid of it if you already have it...Just checking to be sure you were aware of the updates.

Anyway, here's the Post. (I haven't heard whether it actually works or not yet though..At least not by anyone here).

http://www.pcguide.com/vb/showthread.php?s=&postid=176988#post176988

There has been a lot more discussion about this too since you last appeared, so stay a while and look around a little. ;)

There may also be more recent developments that I'm not aware of.

(EDIT) Wow- Just saw your Post Paulo2002- That's strange that you say you never ran the "fix". :confused:

[Steve]

Keep in mind the original file is access.exe. The one you have running is access[1].exe. I don't know what the difference is but if it was running on my computer, I'd put an end to it.

At this point I'm really not sure, did you have the start.chm problem to start?

[jabarnutcase]

Yes...I just noticed that too Steve.I don't know what the difference is but if it was running on my computer, I'd put an end to it. That makes two of us.

I must admit, even though I know my Computer is clean, I couldn't resist checking to see if I had something similar running. :p

Nope! :)

(Edit)At this point I'm really not sure, did you have the start.chm problem to start? Good question Steve, I assumed so.
Guess we'll have to wait and see.

[Paleo Pete]

the original file is access.exe. The one you have running is access[1].exe. I don't know what the difference is...

The access.exe file is the original. access[1].exe is a copy from Temporary Internet Files. If you open TIF and try to copy/save any file, it will save it to wherever you want but will add the [1] to it every time, I suppose to avoid having the exact same filename in two places.

I save webpages to my harddrive that way to look at them later. The pictures are gone unless I save them to the same folder, but the text, what I usually want, is still the same. I rename them, removing the [1] and the pictures will even show up sometimes...if not I can always open them in an image viewer...

So apparently you still have the access.exe file in TIF, and it copied itself to the hard drive and is running.