soybot and spyblaster being overwritten

[koolarry]

Spybot 1.3 keeps alerting us to changes to SearchAssistant inside Internet Explorer. We deny these changes but it keeps try to make chages. Using Spyware Blaster's Tools, we discovered changes to IE browser's pages. They look like this:

http://www.untbisefhfgwkpcmg.com/RHvOSN5_UvnaOFMjTWAADaFtxwaF00SIqBpPmV1BOCGHkneDp8eTiedS9C3oWJZU.cgi

We tried changing the five we found to www/hotmail.com but one immediately changes back to the type of entry seen above. Further, we keep telling spoybot to deny further changes to the above entry and yet every ten or 20 seconds something keeps wanting to change the above address to still another unkown address. I am not sure if it is related, but Panda Anti-Virus keeps renaming a virus it finds in the boot sector but each time we reboot, it recreates itself. Previously we tried deleting this using Norton but it could only delete it only to again have it recreated. What should we do?" ???

[snapdragin]

Hi koolarry, and welcome to Wilders.

It sounds like you've got a hijacker on your computer that might need a more deeper investigation with a log analysis. Since you are using Spybot S&D, you could follow the posting procedures (http://www.net-integration.net/index.php?page=procedures) and instructions on how to post a HijackThis log and Spybot log at the Net-Integration forum.

*edited to add: I'll leave the link to Net-Integration forum: http://forums.net-integration.net/ too since I can't see a way back to the forums from the "posting procedure" page (or I'm just not looking close enough.) :)