abosearch.com browser hijacker (I think)

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Hi All

My friend's WinXP SP1 machine has Microsoft Anti-Spyware Beta (latest
updates), AVG 7.0 free (latest updates) and the built-in firewall on, but
has been infested with some kind of virus/trojan that does the following:

1) Always tries to bounce their browser to www.absoearch.com

2) Shows bogus pages in their browser asking them to send login details such
as Tiscali, etc

3) Fills their hosts file with hundreds of crap web sites

I've MS Anti-Spywared it, AdAware-d it, SpyBot-ed it, AVG 7-d it,
CoolWebShredded it, looked in the Add/Remove Progs and the MSConfig startup
list, but I can't get rid of the above problem.

When I did a HijackThis it found and deleted the offending abosearch
entries, but then when you restart back they come.

If possible, could you please let me know of a solution.

Many thanks.

Regards Mac

Site Timeline