In spite a number of actions taken, including running SpyBot, Adaware 6.0 (freeware versions), CWShredder, Vx2 removal tool, all of them documented to remove MySearchnow, that application is still around. But HijackThis has not being runned (yet).
The scenario is as follows:
– The user installs Windows XP Home Edition on a new PC, creating an Administrator account.
– Later a new Admin account was created, and the previous Admin account was degraded to a user account.
– MySearchnow was installed, using the user account that was previously the account that installed the OS.
– Later on Win XP Home SP2 was installed
– Because of all the crap that followed MySearchnow, it was decided to remove MySearchnow
This went well for the current Admin account, everything was gone, some register settings was also checked and deleted.
However, when returning to the user (that was the former Admin) account, Mysearchnow was still there!
Some efforts were made to remove MySearchnow, among these was to change the user account back to a Admin account, no success, running utilities as described above, to no avail.
That account was changed back to a user account.
After a while, it appears that the toolbars related to MySearchnow was reintroduced back to the intended Admin account, eg the one that was created in addition to the installed Admin account, that was later changed to a user account.
After that no removal tools seems to remove MySearchnow?
What is so strange about the situation is that why is the MySearchnow still on the User side, and why is it coming back on the Admin side?
Is it possible that the fact that the first account was degraded to a user account have something to do with this scenario?