1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Browserchoice.exe -> malware?

Discussion in 'Windows XP' started by Balzer, Mar 19, 2010.

  1. Balzer

    Balzer Flightless Bird

    After turning PC on, got HTML window prompting for BrowserChoice. The
    windows looks like a fake scam window. I closed window. Also, Shortcut icon
    "Browser Choice" has been added on Desktop, with target path
    C:/WINDOWS\system32\browserchoice.exe /launch

    Is the malware or some "legit" application and how to remove it?
     
  2. David H. Lipman

    David H. Lipman Flightless Bird

    From: "Balzer" <balzer@nospam.microsoft.news>

    | After turning PC on, got HTML window prompting for BrowserChoice. The
    | windows looks like a fake scam window. I closed window. Also, Shortcut icon
    | "Browser Choice" has been added on Desktop, with target path
    | C:/WINDOWS\system32\browserchoice.exe /launch

    | Is the malware or some "legit" application and how to remove it?



    Please submit a sample of "browserchoice" to Virus Total --
    http://www.virustotal.com/flash/index_en.html
    The submission will then be tested against many different AV vendor's scanners.
    That will give you an idea what it is and who recognizes it. In addition Virus
    Total will provide the sample to all participating vendors.

    You can also submit a suspect, one at a time, via the following email URL...
    mailto:scan@virustotal.com?subject=SCAN

    When you get the report, please post back the exact results.

    --
    Dave
    http://www.claymania.com/removal-trojan-adware.html
    Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
     
  3. SC Tom

    SC Tom Flightless Bird

    "Balzer" <balzer@nospam.microsoft.news> wrote in message
    news:uAUCYo0xKHA.4752@TK2MSFTNGP04.phx.gbl...
    > After turning PC on, got HTML window prompting for BrowserChoice. The
    > windows looks like a fake scam window. I closed window. Also, Shortcut
    > icon "Browser Choice" has been added on Desktop, with target path
    > C:/WINDOWS\system32\browserchoice.exe /launch
    >
    > Is the malware or some "legit" application and how to remove it?
    >
    >


    Read this:
    http://www.ghacks.net/2010/02/22/windows-browser-choice-screen-will-cause-confusion-in-europe/

    and peruse these:
    http://www.google.com/search?hl=en&...aq=5&aqi=g10&aql=&oq=browser+choice+&gs_rfai=

    Thank you, EU :)
    --
    SC Tom
     
  4. Steve Pearce

    Steve Pearce Flightless Bird

    On Fri, 19 Mar 2010 11:53:53 +0200, "Balzer"
    <balzer@nospam.microsoft.news> wrote:

    >Is the malware or some "legit" application and how to remove it?


    Almost certainly what you seeing the "Browser Choice" update that
    Microsoft was forced to produce for EU countries:

    http://support.microsoft.com/kb/976002
     
  5. Balzer

    Balzer Flightless Bird

    "SC Tom" <sc@tom.net> wrote in message
    news:urVSwM1xKHA.2552@TK2MSFTNGP04.phx.gbl...
    >
    > "Balzer" <balzer@nospam.microsoft.news> wrote in message
    > news:uAUCYo0xKHA.4752@TK2MSFTNGP04.phx.gbl...
    >> After turning PC on, got HTML window prompting for BrowserChoice. The
    >> windows looks like a fake scam window. I closed window. Also, Shortcut
    >> icon "Browser Choice" has been added on Desktop, with target path
    >> C:/WINDOWS\system32\browserchoice.exe /launch
    >>
    >> Is the malware or some "legit" application and how to remove it?
    >>
    >>

    >
    > Read this:
    > http://www.ghacks.net/2010/02/22/windows-browser-choice-screen-will-cause-confusion-in-europe/
    >
    > and peruse these:
    > http://www.google.com/search?hl=en&...aq=5&aqi=g10&aql=&oq=browser+choice+&gs_rfai=
    >
    > Thank you, EU :)
    > --
    > SC Tom

    -----------------



    Since I already use Firefox, I don't need to install anything repeatedly.
    Seems, it will ask me to Select web browser on every reboot? Strange method.
    Is it possible to remove ot uncheck this feature? Didn't find it in msconfig
    utility.

    Regards,
    Balzer
     
  6. The Real Truth MVP

    The Real Truth MVP Flightless Bird

    http://www.microsoft.com/presspass/press/2009/dec09/12-16statement.mspx



    --
    The Real Truth http://pcbutts1-therealtruth.blogspot.com/
    *WARNING* Do NOT follow any advice given by the people listed below.
    They do NOT have the expertise or knowledge to fix your issue. Do not waste
    your time.
    David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.




    "Steve Pearce" <*stevepearce@btinternet.com*> wrote in message
    news:lnm6q51e5kqvb4iq51kqlpq8risvmjmvhc@4ax.com...
    > On Fri, 19 Mar 2010 11:53:53 +0200, "Balzer"
    > <balzer@nospam.microsoft.news> wrote:
    >
    >>Is the malware or some "legit" application and how to remove it?

    >
    > Almost certainly what you seeing the "Browser Choice" update that
    > Microsoft was forced to produce for EU countries:
    >
    > http://support.microsoft.com/kb/976002
     
  7. C

    C Flightless Bird

    Steve Pearce wrote:
    > On Fri, 19 Mar 2010 11:53:53 +0200, "Balzer"
    > <balzer@nospam.microsoft.news> wrote:
    >
    >> Is the malware or some "legit" application and how to remove it?

    >
    > Almost certainly what you seeing the "Browser Choice" update that
    > Microsoft was forced to produce for EU countries:
    >
    > http://support.microsoft.com/kb/976002


    Hmm, I have Windows XP Pro and am in the EU but I didn't get that update.

    --
    C
     
  8. SC Tom

    SC Tom Flightless Bird

    "C" <c@nospamers.com.invalid> wrote in message
    news:ho043o$fc0$1@speranza.aioe.org...
    > Steve Pearce wrote:
    >> On Fri, 19 Mar 2010 11:53:53 +0200, "Balzer"
    >> <balzer@nospam.microsoft.news> wrote:
    >>
    >>> Is the malware or some "legit" application and how to remove it?

    >>
    >> Almost certainly what you seeing the "Browser Choice" update that
    >> Microsoft was forced to produce for EU countries:
    >>
    >> http://support.microsoft.com/kb/976002

    >
    > Hmm, I have Windows XP Pro and am in the EU but I didn't get that update.
    >
    > --
    > C


    According to this article
    http://www.ghacks.net/2010/02/22/windows-browser-choice-screen-will-cause-confusion-in-europe/
    they're starting in England and Belgium first, then branching out to the
    rest of the EU.
    --
    SC Tom
     
  9. C

    C Flightless Bird

    SC Tom wrote:
    >
    > "C" <c@nospamers.com.invalid> wrote in message
    > news:ho043o$fc0$1@speranza.aioe.org...
    >> Steve Pearce wrote:
    >>> On Fri, 19 Mar 2010 11:53:53 +0200, "Balzer"
    >>> <balzer@nospam.microsoft.news> wrote:
    >>>
    >>>> Is the malware or some "legit" application and how to remove it?
    >>>
    >>> Almost certainly what you seeing the "Browser Choice" update that
    >>> Microsoft was forced to produce for EU countries:
    >>>
    >>> http://support.microsoft.com/kb/976002

    >>
    >> Hmm, I have Windows XP Pro and am in the EU but I didn't get that update.
    >>
    >> --
    >> C

    >
    > According to this article
    > http://www.ghacks.net/2010/02/22/windows-browser-choice-screen-will-cause-confusion-in-europe/
    > they're starting in England and Belgium first, then branching out to the
    > rest of the EU.


    That explains it. Course, I already have Chrome, Firefox, Seamonkey and
    IE8 ... and no desire for Opera.

    --
    C
     
  10. Doug W.

    Doug W. Flightless Bird

    "The Real Truth MVP" <trt@void.com> wrote in message
    news:ho01h9$t9k$1@leythos.motzarella.org...
    > http://www.microsoft.com/presspass/press/2009/dec09/12-16statement.mspx
    >
    >
    >
    > --
    > The Real Truth http://pcbutts1-therealtruth.blogspot.com/
    > *WARNING* Do NOT follow any advice given by the people listed
    > below.
    > They do NOT have the expertise or knowledge to fix your issue.
    > Do not waste your time.
    > David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty,
    > Leythos.
    >

    =====

    AND ESPECIALLY: "The Real Truth MVP" ...AS HE IS A BIG BAD UGLY
    TROLL.

    =====
    >
    >
    >
    > "Steve Pearce" <*stevepearce@btinternet.com*> wrote in message
    > news:lnm6q51e5kqvb4iq51kqlpq8risvmjmvhc@4ax.com...
    >> On Fri, 19 Mar 2010 11:53:53 +0200, "Balzer"
    >> <balzer@nospam.microsoft.news> wrote:
    >>
    >>>Is the malware or some "legit" application and how to remove
    >>>it?

    >>
    >> Almost certainly what you seeing the "Browser Choice" update
    >> that
    >> Microsoft was forced to produce for EU countries:
    >>
    >> http://support.microsoft.com/kb/976002

    >
     
  11. Jose

    Jose Flightless Bird

    On Mar 19, 11:34 am, "SC Tom" <s...@tom.net> wrote:
    > "C" <c...@nospamers.com.invalid> wrote in message
    >
    > news:ho043o$fc0$1@speranza.aioe.org...
    >
    > > Steve Pearce wrote:
    > >> On Fri, 19 Mar 2010 11:53:53 +0200, "Balzer"
    > >> <bal...@nospam.microsoft.news> wrote:

    >
    > >>> Is the malware or some "legit" application and how to remove it?

    >
    > >> Almost certainly what you seeing the "Browser Choice" update that
    > >> Microsoft was forced to produce for EU countries:

    >
    > >>http://support.microsoft.com/kb/976002

    >
    > > Hmm, I have Windows XP Pro and am in the EU but I didn't get that update.

    >
    > > --
    > > C

    >
    > According to this articlehttp://www.ghacks.net/2010/02/22/windows-browser-choice-screen-will-c...
    > they're starting in England and Belgium first, then branching out to the
    > rest of the EU.
    > --
    > SC Tom


    You have to be in what is considered a member country.
     
  12. Jose

    Jose Flightless Bird

    On Mar 19, 8:09 am, "Balzer" <bal...@nospam.microsoft.news> wrote:
    > "SC Tom" <s...@tom.net> wrote in message
    >
    > news:urVSwM1xKHA.2552@TK2MSFTNGP04.phx.gbl...
    >
    >
    >
    >
    >
    > > "Balzer" <bal...@nospam.microsoft.news> wrote in message
    > >news:uAUCYo0xKHA.4752@TK2MSFTNGP04.phx.gbl...
    > >> After turning PC on, got HTML window prompting for BrowserChoice. The
    > >> windows looks like a fake scam window. I closed window. Also, Shortcut
    > >> icon "Browser Choice"  has been added on Desktop, with target path
    > >> C:/WINDOWS\system32\browserchoice.exe /launch

    >
    > >> Is the malware or some "legit" application and how to remove it?

    >
    > > Read this:
    > >http://www.ghacks.net/2010/02/22/windows-browser-choice-screen-will-c...

    >
    > > and peruse these:
    > >http://www.google.com/search?hl=en&source=hp&q=browser+choice+virus&a...

    >
    > > Thank you, EU :)
    > > --
    > > SC Tom

    >
    > -----------------
    >
    > Since I already use Firefox, I don't need to install anything repeatedly.
    > Seems, it will ask me to Select web browser on every reboot? Strange method.
    > Is it possible to remove ot uncheck this feature? Didn't find it in msconfig
    > utility.
    >
    > Regards,
    > Balzer


    Here is one method to "manage" it.

    http://support.microsoft.com/kb/2019411

    I think I would remove all traces of it instead of managing it.
     
  13. C

    C Flightless Bird

    Jose wrote:

    >
    > Here is one method to "manage" it.
    >
    > http://support.microsoft.com/kb/2019411
    >
    > I think I would remove all traces of it instead of managing it.


    Now that I know about it, when offered, I will reject it.

    --
    C
     
  14. Balzer

    Balzer Flightless Bird

    "Jose" <jose_ease@yahoo.com> wrote in message
    news:6ef9115a-8ac6-481d-ac85-3b0db023023b@z11g2000yqz.googlegroups.com...
    On Mar 19, 8:09 am, "Balzer" <bal...@nospam.microsoft.news> wrote:
    > "SC Tom" <s...@tom.net> wrote in message
    >
    > news:urVSwM1xKHA.2552@TK2MSFTNGP04.phx.gbl...
    >
    >
    >
    >
    >
    > > "Balzer" <bal...@nospam.microsoft.news> wrote in message
    > >news:uAUCYo0xKHA.4752@TK2MSFTNGP04.phx.gbl...
    > >> After turning PC on, got HTML window prompting for BrowserChoice. The
    > >> windows looks like a fake scam window. I closed window. Also, Shortcut
    > >> icon "Browser Choice" has been added on Desktop, with target path
    > >> C:/WINDOWS\system32\browserchoice.exe /launch

    >
    > >> Is the malware or some "legit" application and how to remove it?

    >
    > > Read this:
    > >http://www.ghacks.net/2010/02/22/windows-browser-choice-screen-will-c...

    >
    > > and peruse these:
    > >http://www.google.com/search?hl=en&source=hp&q=browser+choice+virus&a...

    >
    > > Thank you, EU :)
    > > --
    > > SC Tom

    >
    > -----------------
    >
    > Since I already use Firefox, I don't need to install anything repeatedly.
    > Seems, it will ask me to Select web browser on every reboot? Strange
    > method.
    > Is it possible to remove ot uncheck this feature? Didn't find it in
    > msconfig
    > utility.
    >
    > Regards,
    > Balzer


    Here is one method to "manage" it.

    http://support.microsoft.com/kb/2019411

    I think I would remove all traces of it instead of managing it.
    --------------

    This MS article refers to personal computing environments that are under a
    Volume Licensing program. And applies to:
    * Windows 7 Professional
    * Microsoft Windows XP Professional
    * Windows Vista Business
    * Windows 7 Ultimate
    * Windows 7 Enterprise
    * Windows Vista Enterprise

    I have XP Home ed., not volume.
    Is there way completely uninstall this update?
     
  15. PA Bear [MS MVP]

    PA Bear [MS MVP] Flightless Bird

    The Browser Choice Screen for Europe: What to Expect, When to Expect It -
    Microsoft On The Issues:
    http://microsoftontheissues.com/cs/...-europe-what-to-expect-when-to-expect-it.aspx


    Balzer wrote:
    > After turning PC on, got HTML window prompting for BrowserChoice. The
    > windows looks like a fake scam window. I closed window. Also, Shortcut
    > icon
    > "Browser Choice" has been added on Desktop, with target path
    > C:/WINDOWS\system32\browserchoice.exe /launch
    >
    > Is the malware or some "legit" application and how to remove it?
     
  16. Leythos

    Leythos Flightless Bird

    In article <ho01h9$t9k$1@leythos.motzarella.org>, trt@void.com says...
    > The Real Truth http://pcbutts1-therealtruth.blogspot.com/
    > *WARNING* Do NOT follow any advice given by the people listed below.
    > They do NOT have the expertise or knowledge to fix your issue. Do not waste
    > your time.
    >


    Still stalking others in your every Usenet post - shows how bad you are.

    --
    You can't trust your best friends, your five senses, only the little
    voice inside you that most civilians don't even hear -- Listen to that.
    Trust yourself.
    spam999free@rrohio.com (remove 999 for proper email address)
     
  17. Unknown

    Unknown Flightless Bird

    I see you're playing stupid again. Looks like you're winning too.
    "The Real Truth MVP" <trt@void.com> wrote in message
    news:ho01h9$t9k$1@leythos.motzarella.org...
    > http://www.microsoft.com/presspass/press/2009/dec09/12-16statement.mspx
    >
    >
    >
    > --
    > The Real Truth http://pcbutts1-therealtruth.blogspot.com/
    > *WARNING* Do NOT follow any advice given by the people listed below.
    > They do NOT have the expertise or knowledge to fix your issue. Do not
    > waste your time.
    > David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.
    >
    >
    >
    >
    > "Steve Pearce" <*stevepearce@btinternet.com*> wrote in message
    > news:lnm6q51e5kqvb4iq51kqlpq8risvmjmvhc@4ax.com...
    >> On Fri, 19 Mar 2010 11:53:53 +0200, "Balzer"
    >> <balzer@nospam.microsoft.news> wrote:
    >>
    >>>Is the malware or some "legit" application and how to remove it?

    >>
    >> Almost certainly what you seeing the "Browser Choice" update that
    >> Microsoft was forced to produce for EU countries:
    >>
    >> http://support.microsoft.com/kb/976002

    >
     
  18. LD55ZRA

    LD55ZRA Flightless Bird

    Unknown wrote:

    >I see you're playing stupid again. Looks like you're winning too.
    >
    >


    Well in that case rejoice and enjoy his every post. You could also ask
    you mum to do her bit to polish his below the belt organ.

    hth
     
  19. LD55ZRA

    LD55ZRA Flightless Bird

    C wrote:

    >
    > Hmm, I have Windows XP Pro and am in the EU but I didn't get that update.
    >

    You must have blocked all {useless} updates from Microsoft website. I
    didn't get either but I don't get anything from anywhere because I have
    blocked everything from reaching my system except the emails and web
    pages I visit. All my anti-virus definitions are updated once a week
    manually because I don't believe there is any real threat of viruses as
    Microsoft Valuable Pigs make out to be. You only get infected if you
    allow Microsoft updates. You can't trust anybody on this planet! Not
    even Unknown's <unknown@unknown.kom --
    adsl-99-141-133-84.dsl.emhril.sbcglobal.net 99.141.133.84>mummy.

    hth
     
  20. Unknown

    Unknown Flightless Bird

    Typical comment from a loonie Limey.
    "LD55ZRA" <LD55ZRA@discussions.microsoft.com> wrote in message
    news:ho0u9h$in$1@speranza.aioe.org...
    > Unknown wrote:
    >
    >>I see you're playing stupid again. Looks like you're winning too.
    >>

    >
    > Well in that case rejoice and enjoy his every post. You could also ask
    > you mum to do her bit to polish his below the belt organ.
    >
    > hth
     

Share This Page