default-homepage-network.com

[Mary]

okay, these bastards are really wearing me out. They keep
changing my homepage to that stupid page!! So far, I've
run Adaware many times, I downloaded SpyBot and
CWShredder, a good while ago I made some changes in the
security settings of my IE browser that prevented homepage
changes and other stuff for a good while now. All of a
sudden this.

I'm SURE the solution is very simple. They change my
homepage by changing *registry* values. Is there a way to
lock those registries, and prevent them from tampering
with them?

 

[Martin C]

Check out the following to get rid of your problem.

Get this file:

http://www.kellys-korner-xp.com/regs_edits/RestoreSearch2.REG
After downloading it, right click it and choose Merge.

If you still have problems, download/run HijackThis from:
http://www.merijn.org/
Be very careful with this program though. Do not remove anything that is
referenced by it until you get advice on what to remove as it will list some
good items as well as bad ones.
See http://mjc1.com/mirror/hjt/#quick and read the quick start on how to
create a log file that can be sent to a forum that can provide assistance on
removal of unwanted problems.
Post the logs to an appropriate NG here where they specialize in
spyware/hijacker removal:
http://forums.spywareinfo.com/

There are many Forums that offer Free "Hijack This" log review.
http://www.spywareinfo.com/forums/
http://www.dslreports.com/forum/security,1
http://www.computercops.biz/forums.html
http://www.cybertechhelp.com/forums/index.php
http://boards.cexx.org/
http://forums.net-integration.net/
http://forum.mvps.org/
http://www.wilderssecurity.com/index.php
http://www.lavasoftsupport.com

Take your pick - they all offer excellent support -

At the very least you should have Ad Aware present on your machine and run
it periodically.

Hope this helps,

Martin

 

[Ray]

Further to the posted advice, run CWShredder while in Safe
boot mode and that should clear them out.

 

[H Leboeuf]

Look at the security issues. Get all the latest updates from MS.

Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

 

[Mary]

The registry problems are easily cleared out. They keep
coming back and getting changed over again. I should
mention that I keep returning to the site where I get
infected. It's a message board I've been frequenting for
a while now.

I've also run the little reg program before. I'm still
getting reinfected with this mess.

 

[H Leboeuf]

If still bein infested, it may be time to get help from the expert.

Go to http://www.spywareinfo.com/downloads.php#det
Download "Hijack This!" [freeware] or download direct (below):
http://www.merijn.org/files/hijackthis.zip

If you get a 404 error or Access denied, try:
http://216.180.252.218/~spywareinfo.com/downloads/tools/hijackthis.zip

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates "hijackthis.log")

Next, HijackThis | Config [button] | Misc Tools [button]
Click: Generate StartupList log [button] (generates "startuplist.txt")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, then copy and paste both files in your message.

HijackThis Quick Start Help
http://www.tomcoyote.org/hjt/

The Tutorial if you want to know more about the results or the .log file.
http://www.merijn.org/htlogtutorial.html