Hijacker

[Ken Johnson]

My internet exployer 6 has been accesses by a hijacker,
I constantly get pop ups and have to disable my pop up
stopper to log on to exployer. Is there any way to find
this hijacker in the registery and remove it.

thanks

 

[Burt]

Ken,
Open up REGEDIT and have a look at the list I have below..
I have used Yahoo only as an example, so when you see yours of
course they will be whatever hijacked your page and you want to
remove it and type in the page you want displayed.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.yahoo.com"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.yahoo.com"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://www.yahoo.com"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Bar"="http://www.yahoo.com"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer]
"SearchURL"="http://www.yahoo.com"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"CustomizeSearch"="http://www.yahoo.com"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://www.yahoo.com"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://www.yahoo.com"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Search Bar"="http://www.yahoo.com"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer]
"SearchURL"="http://www.yahoo.com"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"CustomizeSearch"="http://www.yahoo.com"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://www.yahoo.com"
HTH,
--
Burt
The Old Alaskan
MVP's listed on TECKPAGE
http://www.cvinternet.net/~smokydog
http://www.cvinternet.net/~smokydog/teckpage.htm

My internet exployer 6 has been accesses by a hijacker,
I constantly get pop ups and have to disable my pop up
stopper to log on to exployer. Is there any way to find
this hijacker in the registery and remove it.

thanks

 

[PA Bear]

Check your system for "hijackware":

Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

HijackThis (http://www.spywareinfo.com/~merijn/files/hijackthis.zip) is the
preferred tool to use these days. It will help to both identify and remove
any hijackware/spyware. **Post your files to
http://forums.spywareinfo.com/, not here.**

Also update your virus definitions and then run a full system scan. From
now on, do both daily.
--
HTH...Please post back to this thread

~Robear Dyer (aka PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

Protect Your PC
http://www.microsoft.com/security/protect/default.asp