Remove search assistant from startup

The "Search Assistant" bar is a malware. Type the command in RUN box.

Regsvr32 /u C:\Windows\System32\omniband.dll

Then, rename C:\Windows\System32\omniband.dll to old omniband.dll and restart Windows.

Run all of the spyware cleaners suggested.

what will renaming it do?

It is spyware.  I have gotten rid of it by running Spybot and Adaware and have never had to rename or manually uninstall.  You should be fine with the spyware checkers alone.

But renaming does not harm you. (this prevents the spyware from being activating the band again)

if you dont have any other 3rd party addins go into internet options and tell it to disable 3rd party addins

YOU HAVE TO DO THIS: Search the registry for "WindowsSA" without the quotes. REMOVE them all. This will remove it completely. I've had to do this a few times. THEN, be sure to run a spyware removal program such as Spysweeper (available for free at webroot.com). As always, the tampering with the registry can be dangerous, so be careful, but any item you remove that is listed as WindowsSA WILL remove it completely.

To access the registry press Start>RUN. then type "regedit" without the quotes. Highlight My Computer on the top of the tree on the left. under "edit," select "find", then search for WindowsSA.

Then remove all remaining spyware, then virus scann with Norton 2004 (suggested because it also detects spyware/adware, unlike 2003).

Hope this helps!

Best solution is to use Ad-Aware, if you have just installed it make sure to update it so that the spyware deffinitions are updated. Also make sure to schedule Ad-Aware to run at startup this will catch most spyware programs before they initalize.

Try the freeware solution Xcleaner from xblock.com it is  a good spyware cleaner. It will solve all your spyware problems

There is a great freeware utility that TheSCreen Savers has been recommending for years:  Startup by Mike Lin.

It installs a control panel utility that will show you (and allow you to change) all the stuff that runs at startup.

He also has a utility that you can install that will ask you before it allows anything to install itself to run at startup.

Great utilities, have saved me a ton of hassle over the years.  

Get them at:  www.mlin.net/StartupCPL.shtml

i have the same problem... what line in hijack pass is the search assistent? i dont wanna dell all! tnx!

cels9
If you have a question or a problem - post a new thread.
The policy of this forum is to deal with each question in it's own thread.
Also, we don't usually like to comment on HijackThis logs without seeing the
log in question - better safe than sorry!

Good luck!
RF