Can't stop the browserhoice.exe

[chazzy2501]

Errgh, the browserchoice slipped into a tablet just before I imaged it now it's here, I can't stop it!

 

Super annoyingly, I'm running the startscreen.xml for custom metro interface on the tablets the browserchoice has placed itself in the unchangeable startscreen, you can't remove it because "it's unchangeable" yay!

1 registry, I've used 2 sources checked the syntax copied and pasted and then typed it in... it still runs.

 

2 I tried deleting the directory it but you need trusted installer perms....

 

3 I've added a software restriction policy (not clean but it's something), nope it still runs?!!?! OK in windows 8.1 the browserchoice lives in %windir%\browserchoice. I've added the disallowed path rule "%windir%\browserchoice\*.exe" it still runs! A shortcut in the browserchoice folder (the one on the metrostartscreen) runs the browserchoice.exe in %homedrive%%homeshare% , this puzzles me? Does this mean that you can run any program somewhere it's not actually placed & thus negating the path rule in the software restriction policy?

 

short of making a whole new image and redeploying it how do I remove this fing software!

[LeMarchand]

Been a while, but I used a registry GPO to stop it running: like this. (This may be what you did in "1").

 

Not sure what, if any, effect that would have on your Start Screen. May be worth a go if not already tried.

[Novalee]

I just had to do it on a laptop - find the browserchoice.exe in system32 and change ownership to your account - then give yourself full control and I was able to delete it that way. Not sure about how that translates to a tablet though?

[chazzy2501]

I think this is what I did before (collected from my windows 7 pc), it maybe that the browserchoice in Windows 8.1 is slightly different. (it's in a different path for a start) windows\browserchoice not windows\system32\

[3s-gtech]

You can delete the file itself, if you take ownership of it then change permissions. The hateful little piece of malware shouldn't blight your image after that.