Parasite: AutoSearch

This record last updated Tue Sep 20 2005 00:34:14

PLEASE NOTE: Due to the overwhelming extent of this problem and the unbelievable volume of email we have received, we regret that we cannot respond to questions about browser parasites at this time. If you have attempted to contact us about this parasite please accept our apology for not responding. "Thank you's" are always appreciated ;-)

Description

AutoSearch is an IE Browser Helper Object that hijacks address-bar searches. Any address bar search you do is sent to a single page at www.tunders.com (which includes only static adverts, no search results).

It knows about some of the other prevalent search-hijackers — IGetNet, CommonName and NewDotNet — and will steal back any address bar searches they take over.

Also known as

AutoSearchBHO\Hijacker by Ad-Aware. MSInfoSys after its filename.

Distribution

As yet unknown.

What it does

Advertising

No.

Privacy violation

No.

Security issues

No.

Stability problems

None known.

Removal

Open a DOS command prompt window (from Start->Programs->Accessories) and enter the following commands:

cd "%WinDir%\System"
regsvr32 /u msinfosys.dll

You should now be able to delete the ‘msinfosys.dll’ file in your System folder (inside the Windows folder; called ‘System32’ on Windows NT/2000/XP).

It is believed that AutoSearch is usually installed with or by Wink/ASWnk — check your system for this parasite.

* Parasite information and detection script by Andrew Clover - www.doxdesk.com, used with permission.

For more information about Scumware, Spyware and Parasites, their sources and their cure, visit our About Parasites page and related Tech Links.

Visit our new services portal at Allen One for a completely new parasite database format, comming November 2005!