Web Home Page

[Deborah]

Hi,
I have been reading the posts and cannot come up with an
answer to the following:
I keep getting a pesky home page pop up everytime I re-
boot my computer. The new home comes up as
http://www.coolsearch.com but when I go to change it back
to my homepage, I see the page set in the Internet
options it shows as http://t.rack.cc/hp.php
Here's what I have tried: I have run Hijack This and it
goes, only to re-appear. I have run Ad-aware 6.0, same
thing. I even tried Spybot S&D - same thing again. I
have added both URL's to my restricted option, THIS STILL
COMES BACK. It's driving me nuts. Any help out there?
Thanks in advance.

Deborah

 

[DVarnau]

Deborah,
Try CWShredder from http://www.merijn.org/downloads.html

Don

 

[Dave]

Deborah,
I don't have an answer for you but I am having the same
problem, only with a different unwanted home page. It
started a few days ago. In my case it will change when I
power up or when I am on-line after resetting to my
desired home page. I have reset it as many as 5 times in
less than an hour. I installed and ran SpyHunter, which
found 7 parasites on my pc and removed them. I ran
windows explorer to search for files with the text in the
URL of the unwanted home page. It found it in my USER.DAT
and SYSTEM.DAT files. Unfortunately I don't know how to
edit them. I also have another problem with IE6. When I
do a search with any seach engine, the results are
displayed normally for a minute or so then the screen
switches to another display with much of the results the
same, but in a format I don't like. I hope someone out
there has a fix. I'm running Widows Me which Microsoft
doesn't support anymore according to their Support(NOT)
pages.
Dave

 

[Charlie Tame]

Sometimes these darned things can be very persistent and you have to respond
in the same way. Also, you may be getting re-infected by visiting some page
you don't suspect. Try setting unsigned ActiveX off then run the spyware
killers again, some will get what others miss. I know it's a pain in the
neck but not giving up is the only real answer.


--
More Secure ActiveX Settings
http://www.tames.net/security/activexsettings.htm

Even better browser security
http://www.staff.uiuc.edu/~ehowes/resource6.htm
IE Won't work after removing spyware
http://www.cexx.org/lspfix.htm

Help Removing Parasites and AdWare
http://mvps.org/winhelp2002/unwanted.htm
www.lavasoftusa.com
http://security.kolla.de/index.php?lang=en&page=about
http://www.spywareguide.com/product_list_full.php

Charlie

 

[DVarnau]

Dave,
Just to add to Charlie's answer...

Help Removing Parasites and AdWare
http://mvps.org/winhelp2002/unwanted.htm
www.lavasoftusa.com
http://security.kolla.de/index.php?lang=en&page=about
http://www.spywareguide.com/product_list_full.php


Work your way through the solutions at
http://mvps.org/winhelp2002/unwanted.htm

A safe progression would be;
Ad-aware
then Spybot S&D
then CWShredder
then HijackThis http://www.tomcoyote.org/hjt/

Don't try to edit USER.DAT/SYSTEM.DAT- that's your registry.

Regards,
Don

 

[Guest]

Thanks Don. I'll try that. BTW that site is back this
morning again.

Deb

-----Original Message-----
Deborah,
Try CWShredder from http://www.merijn.org/downloads.html

Don
--
Newsgroup replies preferred, but e-mail address is...
don_04[at]varnau[dot]org
- - - - - - - - -
"Deborah" <anonymous[at]discussions.microsoft.com> wrote in message

Hi,
I have been reading the posts and cannot come up with an
answer to the following:
I keep getting a pesky home page pop up everytime I re-
boot my computer. The new home comes up as
http://www.coolsearch.com but when I go to change it back
to my homepage, I see the page set in the Internet
options it shows as http://t.rack.cc/hp.php
Here's what I have tried: I have run Hijack This and it
goes, only to re-appear. I have run Ad-aware 6.0, same
thing. I even tried Spybot S&D - same thing again. I
have added both URL's to my restricted option, THIS STILL
COMES BACK. It's driving me nuts. Any help out there?
Thanks in advance.

Deborah

.

 

[Dave]

I'm not sure how to turn off ActiveX. I used windows
explorer to search for ActiveX and came back with several
folders. Two were in Adobe folders and tow in an Lotus
application folder none were files that were for setup.

 

[Dave]

Charlie,
I found out how to check my ActiveX settings and they were
already set to off for unsigned. So the spyhunter didn't
remove the parasite that is causing my problem, altough it
did find and remove 7 parasites.
Would the URL of the site I end up with as my home page
provide a clue as to which spyware removal tool would work
best? Or do I just have to download and run all of them?
the URL gets changed to RES://MSHP.DLL/INDEX.HTML#22776
Dave

 

[DVarnau]

Dave,
MSHP.DLL indicates coolwebsearch. Go to http://www.merijn.org/downloads.html
for CWShredder. The other programs don't remove CWS completely.

Don
--
Newsgroup replies preferred, but e-mail address is...
don_04[at]varnau[dot]org
- - - - - - - - - - - -

Charlie,
I found out how to check my ActiveX settings and they were
already set to off for unsigned. So the spyhunter didn't
remove the parasite that is causing my problem, altough it
did find and remove 7 parasites.