hijacked homepage

[Guest]

My homepage has been hijacked after clicking on a porn link. Nothing seems to restore the original page over time the hijacked page just reappear. I am wondering too, I get messages saying a computer is near mine if I want to share info. Or something like entry was attempted at ......

This is scary all the programs I tried dont seem to permanently remove this bug/parasite. (adaware, history kill, spy sweeper,spyhunter, spybot...they all seem to work temporarily and then the hijacked homepage comesback and sometiems the nude pics too.)

 

[Carey Frisch [MVP]]

Home Page Setting Changes Unexpectedly, or You Cannot Change Your Home Page Setting
http://support.microsoft.com/default.aspx?scid=kb;en-us;320159&Product=ie600

Bazooka Adware and Spyware Scanner 1.12
http://download.com.com/3000-2144-10247783.html

Consider purchasing and installing a good internet security program:
http://www.symantec.com/sabu/nis/nis_pe/features.html

For additional Internet Explorer assistance:

Please visit the Internet Explorer newsgroup experts:
news://msnews.microsoft.com/microsoft.public.windows.inetexplorer.ie6.browser

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

---------------------------------------------------------------------------------------------------


| My homepage has been hijacked after clicking on a porn link. Nothing seems to restore the original page over
time the hijacked page just reappear. I am wondering too, I get messages saying a computer is near mine if I
want to share info. Or something like entry was attempted at .......
|
| This is scary all the programs I tried dont seem to permanently remove this bug/parasite. (adaware, history
kill, spy sweeper,spyhunter, spybot...they all seem to work temporarily and then the hijacked homepage
comesback and sometiems the nude pics too.)

 

[roger]

Hi Zwain,

My homepage has been hijacked after clicking on a porn link. Nothing seems to restore the original page over time the hijacked page just reappear. I am wondering too, I get messages saying a computer is near mine if I want to share info. Or something like entry was attempted at .......

This is scary all the programs I tried dont seem to permanently remove this bug/parasite. (adaware, history kill, spy sweeper,spyhunter, spybot...they all seem to work temporarily and then the hijacked homepage comesback and sometiems the nude pics too.)

Download the utility CWshredder:
http://www.spywareinfo.com/~merijn/files/cwshredder.zip

Unzip - close *all* instances of IE & OE, hit the executable and
follow
the prompts.

You can also download Hijack This from here:

http://www.mjc1.com/files/merijn/hijackthis.exe

Go here:
http://mjc1.com/mirror/hjt/

For instructions on how to use it; you have to post the log it
produces so experts tell you what is good and what is malware

If these don't correct the problem, then get yourself a copy of
BHODemon, available at
http://www.definitivesolutions.com/bhodemon.htm .

It does not need installing - simply unzip and run the EXE program. It
is easy to use. It will find the hijackware DLL files, and give you
the ability to disable them.

Hope this helps.

 

[yongchou]

| My homepage has been hijacked after clicking on a porn link. Nothing seems to restore the original page over
time the hijacked page just reappear. I am wondering too, I get messages saying a computer is near mine if I
want to share info. Or something like entry was attempted at .......
|
| This is scary all the programs I tried dont seem to permanently remove this bug/parasite. (adaware, history
kill, spy sweeper,spyhunter, spybot...they all seem to work temporarily and then the hijacked homepage
comesback and sometiems the nude pics too.)

I got a very similar problem myself.
I tried quite some anti-spy programs but failed to eliminate the
problem.
Then I read this Chinese page, and did what was suggested. It's quite
OK now.
(After testing with several re-boot.)
-------
Syptoms:

My IE homepage was hijacked, of course.
I tried to run msconfig; simply no response (no sign of startup at
all).
But since I'd installed "Starter.exe", which reveals supposedly all
programs that will automatically run with each Windows booting, I
found in it 2 new items of msconfig.exe

--------
Solutions:

1. Clear all IE temporay files & cookies.

1. HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main &
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main
(Correct the homepage being changed.)
2. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run &
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
(Delete all entries with reference to msconfig.exe(In my case).
3. c:\windows\system32\ or \system\ Look inside to find( msconfig.exe
or .dll), If its changed date is around the infected one. Don't
hesitate to delete it.