Homepage Problem

[Dave]

My home page keeps setting to
http://hot-searches.com/index.php?v=6&aff=737133 without my authorisation.
Can anybody please tell me why it is doing this and how to stop it?

Thanks.

 

[H Leboeuf]

Try this: Tools > Internet Options > Advanced > Browsing
Uncheck the Enable 3rd party browser extensions

If this clears your problem then find out who the culprit(s) is/are with
these tools.

Let AD-Aware Scan your system for advertising Spyware
http://www.lavasoftusa.com

and:

SpyBot-S&D
http://security.kolla.de/

p.s Reset the 3rd party browser setting.

More: This may be caused by a third-party program (adware, spyware,
parasite).
Get AdAware and SpyBot and run them both. Keep them up to date.
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm
--

You may also need this removal tool.

CoolWebSearch - CWS http://www.spywareinfo.com/articles/cws/
More: Complete list by variant with up-to-date information.
http://www.spywareinfo.com/~merijn/cwschronicles.html
More: Removal tool: http://www.spywareinfo.com/~merijn/files/cwshredder.zip
More: Removal tool:
http://www.symantec.com/avcenter/venc/data/vbs.bootconf.html

Henri Leboeuf
Web page: http://www.generation.net/~hleboeuf/index.htm

 

[ruki]

My home page keeps setting to
http://hot-searches.com/index.php?v=6&aff=737133 without my authorisation.
Can anybody please tell me why it is doing this and how to stop it?

Thanks.

i had the same problem, so i looked here and never found anything so i
started to go hunting - go to run and type msconfig then click on
startup. I saw something called eldcgmid - which i didn't think should
belong there so i went to the path it was in C:\Documents and
Settings\Administrator\Application Data\Microsoft\sr64 for me and then
norton found it as a trojen virus and deleted it. so i guess that was
it.

good luck

 

[Mike Burgess]

ruki,

"C:\Documents and Settings\Administrator\Application Data\Microsoft\sr64"

You need to delete that "sr64" folder, as there are usually several other
trojans related files there.

Dealing with Unwanted Malware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm
Note: be *sure* to follow-up with HijackThis
Post back with the URL where you posted if you want help with your log.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 04-09-04]
Please post replies to this Newsgroup, email address is invalid
--