Editing Registry after Viral Infection

[Guest]

My PC has been infected with a virus that has added teen-biz.com in numerous places in the registry. When I delete these entries from the registry they disappear only to reappear when I restart the PC. When I start in safe mode the entries aren't in the registry, but when I log on using my user name they are there in the registry. These entries have made my default home page teen-biz.com and no amount of changing the setting will last - it always resorts to teen-biz.com when restarting the PC
Does anyone have any suggestions of deleting these entries permanently? It would be a lovely Christmas present for me if you do
Thanks guys.

 

[Taurarian]

Perhaps these links will assist you

Spyware Programs links:-
www.lavasoftusa.com Ad-Aware
www.security.kolla.de Spybot

Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

http://support.microsoft.com/?kbid=320159
Home Page Setting Changes Unexpectedly, or You Cannot Change Your Home Page
Setting

My PC has been infected with a virus that has added teen-biz.com in

numerous places in the registry. When I delete these entries from the
registry they disappear only to reappear when I restart the PC. When I start
in safe mode the entries aren't in the registry, but when I log on using my
user name they are there in the registry. These entries have made my default
home page teen-biz.com and no amount of changing the setting will last - it
always resorts to teen-biz.com when restarting the PC.

Does anyone have any suggestions of deleting these entries permanently? It

would be a lovely Christmas present for me if you do!

 

[btilc]

Perhaps these links will assist you

Spyware Programs links:-
www.lavasoftusa.com Ad-Aware
www.security.kolla.de Spybot

Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

http://support.microsoft.com/?kbid=320159
Home Page Setting Changes Unexpectedly, or You Cannot Change Your Home Page
Setting


numerous places in the registry. When I delete these entries from the
registry they disappear only to reappear when I restart the PC. When I start
in safe mode the entries aren't in the registry, but when I log on using my
user name they are there in the registry. These entries have made my default
home page teen-biz.com and no amount of changing the setting will last - it
always resorts to teen-biz.com when restarting the PC.
would be a lovely Christmas present for me if you do!

Here ya go......I did a cut and paste from a solution I posted

earlier....hope it does the trick...let me know.

If anyone is getting hit with the Teen-Biz forced homepage issue, I
have a solution for you.

A friend of mine called me over as he was having spam problems. His
browser homepage setting kept getting reset to www.teen-biz.com. When
I took a look, I also noticed that when a shutdown was initiated, a
"Win Min" error appeared.

I took a look at his program startup options and found a winlogon.exe
entry. I took at look at processes running and found 2 winlogon
process...hmmm...here ya go. When I tried to remove the winlogon.exe
entry from the startup menu I got an access violation.

To correct the problem I rebooted into CMD mode and renamed the exe.
After I booted back up, I was able to remove the file from the startup
menu.