hijacked homepage

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

My homepage has been hijacked after clicking on a porn link. Nothing seems to restore the original page over time the hijacked page just reappear. I am wondering too, I get messages saying a computer is near mine if I want to share info. Or something like entry was attempted at ......

This is scary all the programs I tried dont seem to permanently remove this bug/parasite. (adaware, history kill, spy sweeper,spyhunter, spybot...they all seem to work temporarily and then the hijacked homepage comesback and sometiems the nude pics too.)
 
Home Page Setting Changes Unexpectedly, or You Cannot Change Your Home Page Setting
http://support.microsoft.com/default.aspx?scid=kb;en-us;320159&Product=ie600

Bazooka Adware and Spyware Scanner 1.12
http://download.com.com/3000-2144-10247783.html

Consider purchasing and installing a good internet security program:
http://www.symantec.com/sabu/nis/nis_pe/features.html

For additional Internet Explorer assistance:

Please visit the Internet Explorer newsgroup experts:
news://msnews.microsoft.com/microsoft.public.windows.inetexplorer.ie6.browser

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

---------------------------------------------------------------------------------------------------


| My homepage has been hijacked after clicking on a porn link. Nothing seems to restore the original page over
time the hijacked page just reappear. I am wondering too, I get messages saying a computer is near mine if I
want to share info. Or something like entry was attempted at .......
|
| This is scary all the programs I tried dont seem to permanently remove this bug/parasite. (adaware, history
kill, spy sweeper,spyhunter, spybot...they all seem to work temporarily and then the hijacked homepage
comesback and sometiems the nude pics too.)
 
Hi Zwain,

My homepage has been hijacked after clicking on a porn link. Nothing seems to restore the original page over time the hijacked page just reappear. I am wondering too, I get messages saying a computer is near mine if I want to share info. Or something like entry was attempted at .......

This is scary all the programs I tried dont seem to permanently remove this bug/parasite. (adaware, history kill, spy sweeper,spyhunter, spybot...they all seem to work temporarily and then the hijacked homepage comesback and sometiems the nude pics too.)
Click to expand...

Download the utility CWshredder:
http://www.spywareinfo.com/~merijn/files/cwshredder.zip

Unzip - close *all* instances of IE & OE, hit the executable and
follow
the prompts.

You can also download Hijack This from here:

http://www.mjc1.com/files/merijn/hijackthis.exe

Go here:
http://mjc1.com/mirror/hjt/

For instructions on how to use it; you have to post the log it
produces so experts tell you what is good and what is malware

If these don't correct the problem, then get yourself a copy of
BHODemon, available at
http://www.definitivesolutions.com/bhodemon.htm .

It does not need installing - simply unzip and run the EXE program. It
is easy to use. It will find the hijackware DLL files, and give you
the ability to disable them.

Hope this helps.
 
Zwain said:
| My homepage has been hijacked after clicking on a porn link. Nothing seems to restore the original page over
time the hijacked page just reappear. I am wondering too, I get messages saying a computer is near mine if I
want to share info. Or something like entry was attempted at .......
|
| This is scary all the programs I tried dont seem to permanently remove this bug/parasite. (adaware, history
kill, spy sweeper,spyhunter, spybot...they all seem to work temporarily and then the hijacked homepage
comesback and sometiems the nude pics too.)
Click to expand...

I got a very similar problem myself.
I tried quite some anti-spy programs but failed to eliminate the
problem.
Then I read this Chinese page, and did what was suggested. It's quite
OK now.
(After testing with several re-boot.)
-------
Syptoms:

My IE homepage was hijacked, of course.
I tried to run msconfig; simply no response (no sign of startup at
all).
But since I'd installed "Starter.exe", which reveals supposedly all
programs that will automatically run with each Windows booting, I
found in it 2 new items of msconfig.exe

--------
Solutions:

1. Clear all IE temporay files & cookies.

1. HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main &
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main
(Correct the homepage being changed.)
2. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run &
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
(Delete all entries with reference to msconfig.exe(In my case).
3. c:\windows\system32\ or \system\ Look inside to find( msconfig.exe
or .dll), If its changed date is around the infected one. Don't
hesitate to delete it.
 
Back
Top