• Welcome to Tux Reports: Where Penguins Fly. We hope you find the topics varied, interesting, and worthy of your time. Please become a member and join in the discussions.

Browserchoice.exe -> malware?

B

Balzer

Flightless Bird
After turning PC on, got HTML window prompting for BrowserChoice. The
windows looks like a fake scam window. I closed window. Also, Shortcut icon
"Browser Choice" has been added on Desktop, with target path
C:/WINDOWS\system32\browserchoice.exe /launch

Is the malware or some "legit" application and how to remove it?
 
D

David H. Lipman

Flightless Bird
From: "Balzer" <balzer@nospam.microsoft.news>

| After turning PC on, got HTML window prompting for BrowserChoice. The
| windows looks like a fake scam window. I closed window. Also, Shortcut icon
| "Browser Choice" has been added on Desktop, with target path
| C:/WINDOWS\system32\browserchoice.exe /launch

| Is the malware or some "legit" application and how to remove it?



Please submit a sample of "browserchoice" to Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against many different AV vendor's scanners.
That will give you an idea what it is and who recognizes it. In addition Virus
Total will provide the sample to all participating vendors.

You can also submit a suspect, one at a time, via the following email URL...
mailto:scan@virustotal.com?subject=SCAN

When you get the report, please post back the exact results.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
 
S

SC Tom

Flightless Bird
"Balzer" <balzer@nospam.microsoft.news> wrote in message
news:uAUCYo0xKHA.4752@TK2MSFTNGP04.phx.gbl...
> After turning PC on, got HTML window prompting for BrowserChoice. The
> windows looks like a fake scam window. I closed window. Also, Shortcut
> icon "Browser Choice" has been added on Desktop, with target path
> C:/WINDOWS\system32\browserchoice.exe /launch
>
> Is the malware or some "legit" application and how to remove it?
>
>


Read this:
http://www.ghacks.net/2010/02/22/windows-browser-choice-screen-will-cause-confusion-in-europe/

and peruse these:
http://www.google.com/search?hl=en&...aq=5&aqi=g10&aql=&oq=browser+choice+&gs_rfai=

Thank you, EU :)
--
SC Tom
 
S

Steve Pearce

Flightless Bird
On Fri, 19 Mar 2010 11:53:53 +0200, "Balzer"
<balzer@nospam.microsoft.news> wrote:

>Is the malware or some "legit" application and how to remove it?


Almost certainly what you seeing the "Browser Choice" update that
Microsoft was forced to produce for EU countries:

http://support.microsoft.com/kb/976002
 
B

Balzer

Flightless Bird
"SC Tom" <sc@tom.net> wrote in message
news:urVSwM1xKHA.2552@TK2MSFTNGP04.phx.gbl...
>
> "Balzer" <balzer@nospam.microsoft.news> wrote in message
> news:uAUCYo0xKHA.4752@TK2MSFTNGP04.phx.gbl...
>> After turning PC on, got HTML window prompting for BrowserChoice. The
>> windows looks like a fake scam window. I closed window. Also, Shortcut
>> icon "Browser Choice" has been added on Desktop, with target path
>> C:/WINDOWS\system32\browserchoice.exe /launch
>>
>> Is the malware or some "legit" application and how to remove it?
>>
>>

>
> Read this:
> http://www.ghacks.net/2010/02/22/windows-browser-choice-screen-will-cause-confusion-in-europe/
>
> and peruse these:
> http://www.google.com/search?hl=en&...aq=5&aqi=g10&aql=&oq=browser+choice+&gs_rfai=
>
> Thank you, EU :)
> --
> SC Tom

-----------------



Since I already use Firefox, I don't need to install anything repeatedly.
Seems, it will ask me to Select web browser on every reboot? Strange method.
Is it possible to remove ot uncheck this feature? Didn't find it in msconfig
utility.

Regards,
Balzer
 
T

The Real Truth MVP

Flightless Bird
http://www.microsoft.com/presspass/press/2009/dec09/12-16statement.mspx



--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.




"Steve Pearce" <*stevepearce@btinternet.com*> wrote in message
news:lnm6q51e5kqvb4iq51kqlpq8risvmjmvhc@4ax.com...
> On Fri, 19 Mar 2010 11:53:53 +0200, "Balzer"
> <balzer@nospam.microsoft.news> wrote:
>
>>Is the malware or some "legit" application and how to remove it?

>
> Almost certainly what you seeing the "Browser Choice" update that
> Microsoft was forced to produce for EU countries:
>
> http://support.microsoft.com/kb/976002
 
C

C

Flightless Bird
Steve Pearce wrote:
> On Fri, 19 Mar 2010 11:53:53 +0200, "Balzer"
> <balzer@nospam.microsoft.news> wrote:
>
>> Is the malware or some "legit" application and how to remove it?

>
> Almost certainly what you seeing the "Browser Choice" update that
> Microsoft was forced to produce for EU countries:
>
> http://support.microsoft.com/kb/976002


Hmm, I have Windows XP Pro and am in the EU but I didn't get that update.

--
C
 
S

SC Tom

Flightless Bird
"C" <c@nospamers.com.invalid> wrote in message
news:ho043o$fc0$1@speranza.aioe.org...
> Steve Pearce wrote:
>> On Fri, 19 Mar 2010 11:53:53 +0200, "Balzer"
>> <balzer@nospam.microsoft.news> wrote:
>>
>>> Is the malware or some "legit" application and how to remove it?

>>
>> Almost certainly what you seeing the "Browser Choice" update that
>> Microsoft was forced to produce for EU countries:
>>
>> http://support.microsoft.com/kb/976002

>
> Hmm, I have Windows XP Pro and am in the EU but I didn't get that update.
>
> --
> C


According to this article
http://www.ghacks.net/2010/02/22/windows-browser-choice-screen-will-cause-confusion-in-europe/
they're starting in England and Belgium first, then branching out to the
rest of the EU.
--
SC Tom
 
C

C

Flightless Bird
SC Tom wrote:
>
> "C" <c@nospamers.com.invalid> wrote in message
> news:ho043o$fc0$1@speranza.aioe.org...
>> Steve Pearce wrote:
>>> On Fri, 19 Mar 2010 11:53:53 +0200, "Balzer"
>>> <balzer@nospam.microsoft.news> wrote:
>>>
>>>> Is the malware or some "legit" application and how to remove it?
>>>
>>> Almost certainly what you seeing the "Browser Choice" update that
>>> Microsoft was forced to produce for EU countries:
>>>
>>> http://support.microsoft.com/kb/976002

>>
>> Hmm, I have Windows XP Pro and am in the EU but I didn't get that update.
>>
>> --
>> C

>
> According to this article
> http://www.ghacks.net/2010/02/22/windows-browser-choice-screen-will-cause-confusion-in-europe/
> they're starting in England and Belgium first, then branching out to the
> rest of the EU.


That explains it. Course, I already have Chrome, Firefox, Seamonkey and
IE8 ... and no desire for Opera.

--
C
 
D

Doug W.

Flightless Bird
"The Real Truth MVP" <trt@void.com> wrote in message
news:ho01h9$t9k$1@leythos.motzarella.org...
> http://www.microsoft.com/presspass/press/2009/dec09/12-16statement.mspx
>
>
>
> --
> The Real Truth http://pcbutts1-therealtruth.blogspot.com/
> *WARNING* Do NOT follow any advice given by the people listed
> below.
> They do NOT have the expertise or knowledge to fix your issue.
> Do not waste your time.
> David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty,
> Leythos.
>

=====

AND ESPECIALLY: "The Real Truth MVP" ...AS HE IS A BIG BAD UGLY
TROLL.

=====
>
>
>
> "Steve Pearce" <*stevepearce@btinternet.com*> wrote in message
> news:lnm6q51e5kqvb4iq51kqlpq8risvmjmvhc@4ax.com...
>> On Fri, 19 Mar 2010 11:53:53 +0200, "Balzer"
>> <balzer@nospam.microsoft.news> wrote:
>>
>>>Is the malware or some "legit" application and how to remove
>>>it?

>>
>> Almost certainly what you seeing the "Browser Choice" update
>> that
>> Microsoft was forced to produce for EU countries:
>>
>> http://support.microsoft.com/kb/976002

>
 
J

Jose

Flightless Bird
On Mar 19, 11:34 am, "SC Tom" <s...@tom.net> wrote:
> "C" <c...@nospamers.com.invalid> wrote in message
>
> news:ho043o$fc0$1@speranza.aioe.org...
>
> > Steve Pearce wrote:
> >> On Fri, 19 Mar 2010 11:53:53 +0200, "Balzer"
> >> <bal...@nospam.microsoft.news> wrote:

>
> >>> Is the malware or some "legit" application and how to remove it?

>
> >> Almost certainly what you seeing the "Browser Choice" update that
> >> Microsoft was forced to produce for EU countries:

>
> >>http://support.microsoft.com/kb/976002

>
> > Hmm, I have Windows XP Pro and am in the EU but I didn't get that update.

>
> > --
> > C

>
> According to this articlehttp://www.ghacks.net/2010/02/22/windows-browser-choice-screen-will-c...
> they're starting in England and Belgium first, then branching out to the
> rest of the EU.
> --
> SC Tom


You have to be in what is considered a member country.
 
J

Jose

Flightless Bird
On Mar 19, 8:09 am, "Balzer" <bal...@nospam.microsoft.news> wrote:
> "SC Tom" <s...@tom.net> wrote in message
>
> news:urVSwM1xKHA.2552@TK2MSFTNGP04.phx.gbl...
>
>
>
>
>
> > "Balzer" <bal...@nospam.microsoft.news> wrote in message
> >news:uAUCYo0xKHA.4752@TK2MSFTNGP04.phx.gbl...
> >> After turning PC on, got HTML window prompting for BrowserChoice. The
> >> windows looks like a fake scam window. I closed window. Also, Shortcut
> >> icon "Browser Choice"  has been added on Desktop, with target path
> >> C:/WINDOWS\system32\browserchoice.exe /launch

>
> >> Is the malware or some "legit" application and how to remove it?

>
> > Read this:
> >http://www.ghacks.net/2010/02/22/windows-browser-choice-screen-will-c...

>
> > and peruse these:
> >http://www.google.com/search?hl=en&source=hp&q=browser+choice+virus&a...

>
> > Thank you, EU :)
> > --
> > SC Tom

>
> -----------------
>
> Since I already use Firefox, I don't need to install anything repeatedly.
> Seems, it will ask me to Select web browser on every reboot? Strange method.
> Is it possible to remove ot uncheck this feature? Didn't find it in msconfig
> utility.
>
> Regards,
> Balzer


Here is one method to "manage" it.

http://support.microsoft.com/kb/2019411

I think I would remove all traces of it instead of managing it.
 
B

Balzer

Flightless Bird
"Jose" <jose_ease@yahoo.com> wrote in message
news:6ef9115a-8ac6-481d-ac85-3b0db023023b@z11g2000yqz.googlegroups.com...
On Mar 19, 8:09 am, "Balzer" <bal...@nospam.microsoft.news> wrote:
> "SC Tom" <s...@tom.net> wrote in message
>
> news:urVSwM1xKHA.2552@TK2MSFTNGP04.phx.gbl...
>
>
>
>
>
> > "Balzer" <bal...@nospam.microsoft.news> wrote in message
> >news:uAUCYo0xKHA.4752@TK2MSFTNGP04.phx.gbl...
> >> After turning PC on, got HTML window prompting for BrowserChoice. The
> >> windows looks like a fake scam window. I closed window. Also, Shortcut
> >> icon "Browser Choice" has been added on Desktop, with target path
> >> C:/WINDOWS\system32\browserchoice.exe /launch

>
> >> Is the malware or some "legit" application and how to remove it?

>
> > Read this:
> >http://www.ghacks.net/2010/02/22/windows-browser-choice-screen-will-c...

>
> > and peruse these:
> >http://www.google.com/search?hl=en&source=hp&q=browser+choice+virus&a...

>
> > Thank you, EU :)
> > --
> > SC Tom

>
> -----------------
>
> Since I already use Firefox, I don't need to install anything repeatedly.
> Seems, it will ask me to Select web browser on every reboot? Strange
> method.
> Is it possible to remove ot uncheck this feature? Didn't find it in
> msconfig
> utility.
>
> Regards,
> Balzer


Here is one method to "manage" it.

http://support.microsoft.com/kb/2019411

I think I would remove all traces of it instead of managing it.
--------------

This MS article refers to personal computing environments that are under a
Volume Licensing program. And applies to:
* Windows 7 Professional
* Microsoft Windows XP Professional
* Windows Vista Business
* Windows 7 Ultimate
* Windows 7 Enterprise
* Windows Vista Enterprise

I have XP Home ed., not volume.
Is there way completely uninstall this update?
 
P

PA Bear [MS MVP]

Flightless Bird
The Browser Choice Screen for Europe: What to Expect, When to Expect It -
Microsoft On The Issues:
http://microsoftontheissues.com/cs/...-europe-what-to-expect-when-to-expect-it.aspx


Balzer wrote:
> After turning PC on, got HTML window prompting for BrowserChoice. The
> windows looks like a fake scam window. I closed window. Also, Shortcut
> icon
> "Browser Choice" has been added on Desktop, with target path
> C:/WINDOWS\system32\browserchoice.exe /launch
>
> Is the malware or some "legit" application and how to remove it?
 
L

Leythos

Flightless Bird
In article <ho01h9$t9k$1@leythos.motzarella.org>, trt@void.com says...
> The Real Truth http://pcbutts1-therealtruth.blogspot.com/
> *WARNING* Do NOT follow any advice given by the people listed below.
> They do NOT have the expertise or knowledge to fix your issue. Do not waste
> your time.
>


Still stalking others in your every Usenet post - shows how bad you are.

--
You can't trust your best friends, your five senses, only the little
voice inside you that most civilians don't even hear -- Listen to that.
Trust yourself.
spam999free@rrohio.com (remove 999 for proper email address)
 
U

Unknown

Flightless Bird
I see you're playing stupid again. Looks like you're winning too.
"The Real Truth MVP" <trt@void.com> wrote in message
news:ho01h9$t9k$1@leythos.motzarella.org...
> http://www.microsoft.com/presspass/press/2009/dec09/12-16statement.mspx
>
>
>
> --
> The Real Truth http://pcbutts1-therealtruth.blogspot.com/
> *WARNING* Do NOT follow any advice given by the people listed below.
> They do NOT have the expertise or knowledge to fix your issue. Do not
> waste your time.
> David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.
>
>
>
>
> "Steve Pearce" <*stevepearce@btinternet.com*> wrote in message
> news:lnm6q51e5kqvb4iq51kqlpq8risvmjmvhc@4ax.com...
>> On Fri, 19 Mar 2010 11:53:53 +0200, "Balzer"
>> <balzer@nospam.microsoft.news> wrote:
>>
>>>Is the malware or some "legit" application and how to remove it?

>>
>> Almost certainly what you seeing the "Browser Choice" update that
>> Microsoft was forced to produce for EU countries:
>>
>> http://support.microsoft.com/kb/976002

>
 
L

LD55ZRA

Flightless Bird
Unknown wrote:

>I see you're playing stupid again. Looks like you're winning too.
>
>


Well in that case rejoice and enjoy his every post. You could also ask
you mum to do her bit to polish his below the belt organ.

hth
 
L

LD55ZRA

Flightless Bird
C wrote:

>
> Hmm, I have Windows XP Pro and am in the EU but I didn't get that update.
>

You must have blocked all {useless} updates from Microsoft website. I
didn't get either but I don't get anything from anywhere because I have
blocked everything from reaching my system except the emails and web
pages I visit. All my anti-virus definitions are updated once a week
manually because I don't believe there is any real threat of viruses as
Microsoft Valuable Pigs make out to be. You only get infected if you
allow Microsoft updates. You can't trust anybody on this planet! Not
even Unknown's <unknown@unknown.kom --
adsl-99-141-133-84.dsl.emhril.sbcglobal.net 99.141.133.84>mummy.

hth
 
U

Unknown

Flightless Bird
Typical comment from a loonie Limey.
"LD55ZRA" <LD55ZRA@discussions.microsoft.com> wrote in message
news:ho0u9h$in$1@speranza.aioe.org...
> Unknown wrote:
>
>>I see you're playing stupid again. Looks like you're winning too.
>>

>
> Well in that case rejoice and enjoy his every post. You could also ask
> you mum to do her bit to polish his below the belt organ.
>
> hth
 
Top