I'm a fairly saavy internet user, so for SearchAtHand to by-pass my defenses and knowledge is darn sneaky. They've figured out a very effective way to hi-jack your browswer, by-pass your defenses, and frustrate internet users who would rather have default results returned by a more reputable search engine.
The symptoms:
For the past two weeks, I have not been able to log into certain websites that I frequent, including Statcounter.com and Alexa.com because of 403 errors. I've had to log into these sites using an alternate computer, which has been inconvenient to say the least. I tried re-setting my browser to its factory settings, but to no avail.
My first clue that my DNS settings had been pirated should have been when my "default search" settings in my browser started showing up as something called SearchAtHand.com.
Whenever I misspelled a domain name, SearchAtHand wanted to handle my search.
Weird things would also happen -- such as trying to get to a website, and being "routed" someplace else.
After anti-spyware scans (eTrust) and anti-virus scans (Windows Defender) turned up nothing, I started suspecting a trojan application. Searches on Google turned up very little about SearchAtHand.
Eventually I found what I needed with the help of MSN search (note to Google: you better start providing results that are more fresh: your stale results are regularly and frequently pushing me toward MSN, where the results are much more fresh. Google seems to be about 6 to 12 months behind MSN, but thats another blog).
On MSN, I came across this tutorial at Free Security Tools that tells me how to remove SearchAtHand's DNS Settings. I recommend it. It worked for me. I won't re-hash it here since they did a nice job with screenshots and everything else.
I have no idea how SearchAtHand got its claws into my computer. Somewhere, on some page, something misleading was downloaded, perhaps as an activeX control. I just don't know.
Watch out for Adware or spyware removal companies claim to be marketing a solution to this specific problem that don't work. The best way is to remove it yourself, for free. You shouldn't have to pay to fix what someone else has broken.
And as for you SearchAtHand, this will catch up with you eventually. Evil is as evil does (Forrest Gump).
-- UPDATE: XoftSpy anti-vir by Parreto Logic will now uninstall SearchAtHand. I verified this fact directly with their support dept. If for some reason your SAH variant is not removed, they will work with you directly to solve it. You can download it here. Let me know how it works!
