Registry Edit & IE Homepage Hi-Jack

[Mike]

Yesterday when I accessed Hotmail, some ads poped up and
the setting for my home page was reset to
http://t.rack.cc/hp.php which routed my "new" home page to
http://www.superbookmark.com. I accessed regedt32 in
regular mode and in safe mode to reset and save the search
bars, search page and home page several times. But to no
avail, http://t.rack.cc/hp.php resets all settings. Can
anyone help on this?

 

[Chris Herman]

I have had your same exact symptoms. And one (suspicious) entry in my
registry. I am 99.9% sure that removing the following key:
HKLM\..\Run: [sys] regedit -s sys.reg

and sys.reg from your windows system folder will take care of the
problem. I checked the sys.reg file in notepad and voila; looked just
like the culprit. Being set up to run like it is, it will reappear
after every logoff/logon.

Anyhow, I applied this change just now and am hopeful for the best.
Strange that none of my spyware or virus programs detected/cleaned
this guy.

Christian Herman

 

[r.c.]

Do a Google search for: CWShredder or d/l:

If you need current copies of HijackThis or CWShredder, those are
being mirrored here:
HijackThis: http://www.spywareinfo.com/downloads/tools/HijackThis.exe
CWShredder: http://www.spywareinfo.com/downloads/tools/CWShredder1491.exe

I have had your same exact symptoms. And one (suspicious) entry in my
registry. I am 99.9% sure that removing the following key:
HKLM\..\Run: [sys] regedit -s sys.reg

and sys.reg from your windows system folder will take care of the
problem. I checked the sys.reg file in notepad and voila; looked just
like the culprit. Being set up to run like it is, it will reappear
after every logoff/logon.

Anyhow, I applied this change just now and am hopeful for the best.
Strange that none of my spyware or virus programs detected/cleaned
this guy.

Christian Herman

Yesterday when I accessed Hotmail, some ads poped up and
the setting for my home page was reset to
http://t.rack.cc/hp.php which routed my "new" home page to
http://www.superbookmark.com. I accessed regedt32 in
regular mode and in safe mode to reset and save the search
bars, search page and home page several times. But to no
avail, http://t.rack.cc/hp.php resets all settings. Can
anyone help on this?