Hijacked home page

S

siljaline

Ryan said:
My homepage ahs been hijacked. I tried to fix it by
hacking the registry but I do not have the subkey in
question.

HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet
Explorer\Control Panel

Can someone help?

Type "scanreg /opt /fix" (no quotes - *note spacing*) from your
Run > Dialog Box, this will rebuild your Registry to a previous state.
Follow the prompts, as you will be required to reboot your machine.

Run "Hijack This" from this link to clean up the remaining Spyware.
http://mvps.org/winhelp2002/unwanted.htm

Hope this helps and please post back with your findings from the Spyware
Info Support Forum.
Do not attempt to repair items from a Hijack This scan yourself, please let
experts look at your log files first.

--

siljaline MS - MVP IE/OE

(Please reply to group, as reply address is invalid,
so that we can all benefit)

"Arguing with anonymous strangers on the Internet is
a sucker's game because they almost always turn out
to be -- or to be indistinguishable from -- self-righteous
sixteen-year-olds possessing infinite amounts of free time."
Neil Stephenson, _Cryptonomicon_
 
R

Ryan

Thanks for the suggestion. I tried "scanreg /opt
/fix" and windows did not recognize "scanreg"

I also did the Hijack This deal and that came up with
a list of things and the ones that included
"searchv.com" I deleted but it did not seem to work.
I still get searchv as my homepage. I also downloaded
Lavasoft Ad-aware but no help on this particular
topic. What next? I really appreciate the help
 
S

siljaline

Ryan said:
Thanks for the suggestion. I tried "scanreg /opt
/fix" and windows did not recognize "scanreg"

I also did the Hijack This deal and that came up with
a list of things and the ones that included
"searchv.com" I deleted but it did not seem to work.
I still get searchv as my homepage. I also downloaded
Lavasoft Ad-aware but no help on this particular
topic. What next? I really appreciate the help

Ryan,
The command line for 'scanreg' you likely typed incorrectly.
Snip and paste in your Run > Dialog box scanreg /opt /fix
(The above is moot at this point, you are still fully hijacked).

Based on what you're saying with Hijack This, you attempted
a fix on your own. To repeat myself, let the experts review the
logs *before* you attempt anything yourself.

The whole process,
Go to:
http://www.spywareinfo.com/~merijn/files/hijackthis.zip

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates "hijackthis.log")

Next, HijackThis | Config [button] | Misc Tools [button]
Click: Generate StartupList log [button] (generates "startuplist.txt")

Next, go to the below location: Spyware and Hijackware Removal Support.
http://forums.spywareinfo.com

Sign in, or, post as a guest, then copy and paste both files in your message.

HTH

--

siljaline MS - MVP IE/OE

(Please reply to group, as reply address is invalid,
so that we can all benefit)

"Arguing with anonymous strangers on the Internet is
a sucker's game because they almost always turn out
to be -- or to be indistinguishable from -- self-righteous
sixteen-year-olds possessing infinite amounts of free time."
Neil Stephenson, _Cryptonomicon_
 
J

Jim Byrd

Hi Ryan - Follow the directions here, carefully:
http://forums.spywareinfo.com/index.php?showtopic=13977&hl=searchv If that
doesn't fix it, then:


Download HijackThis, free, here:
http://www.spywareinfo.com/~merijn/files/hijackthis.zip

Unzip it to any convenient folder, start it then press Scan. Click on
SaveLog when it's finished which will create hijackthis.log. Now click
the Config button, then Misc Tools and click on Generate StartupList.log
which will create Startuplist.txt

Go to Spyware and Hijackware Removal Support, here:
http://www.spywareinfo.com/forums/index.php?s=8a236cdf61469fbad3bddbe810be0374&act=SF&f=11

Sign in, then copy and paste both files a message asking for assistance,
Someone will answer with detailed instructions for the removal of your
parasite(s).



For the general hijack case, the best way to start is to get Ad-Aware 6.0,
Build 181 or later, here: http://www.lavasoftusa.com/support/download/.
Update and run this regularly to get rid of most "spyware/hijackware" on
your machine. If it has to fix things, be sure to re-boot and rerun
AdAware again and repeat this cycle until you get a clean scan. The reason
is that it may have to remove things which are currently "in use" before it
can then clean up others.

Another excellent program for this purpose is SpyBot Search and Destroy
available here: http://security.kolla.de/ SpyBot Support Forum here:
http://www.net-integration.net/cgi-bin/forums/ikonboard.cgi. I recommend
using both normally. After fixing things with SpyBot S&D, be sure to
re-boot and rerun SpyBot again and repeat this cycle until you get a clean
"no red" scan. The reason is that SpyBot sometimes has to remove things
which are currently "in use" before it can then clean up others.


Note that sometimes you need to make a judgement call about what these
programs report as spyware. See here, for example:
http://www.imilly.com/alexa.htm


Once you get this cleaned up, you might want to consider installing the
SpywareBlaster and SpywareGuard here to help prevent this kind of thing from
happening in the future:
http://www.wilderssecurity.com/spywareblaster.html (Prevents malware Active
X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU or
memory load - but keep it updated) The latest version as of this writing
will prevent installation or prevent the malware from running if it is
already installed, and it provides information and fixit-links for a variety
of parasites.
http://www.wilderssecurity.net/spywareguard.html (Monitors for attempts to
install malware) Both Very Highly Recommended.

See if any of this helps and post back with your results.


--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top