Home page problem

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hello

I'm having a problem with my home page setting in IE6. I typically have it set to msn.com, but lately it has been automatically changed to a site called riviera.cc everytime I turn off my computer. Perhaps I downloaded some virus or bug by mistake? If anyone has any advice about how to get rid of this problem, please let me know

Thanks in advance
Matt
 
peak1013 said:
Hello,

I'm having a problem with my home page setting in IE6. I typically have it set to msn.com, but lately it has been automatically changed to a site called riviera.cc everytime I turn off my computer. Perhaps I downloaded some virus or bug by mistake? If anyone has any advice about how to get rid of this problem, please let me know.

Thanks in advance,
Matt
Click to expand...

See this website:
"Dealing with Unwanted Spyware and Parasites"
http://www.mvps.org/winhelp2002/unwanted.htm

Get also the spyware removal tool Adaware:
http://www.lavasoftusa.com/support/download/

Do an online scan at Panda:
http://www.pandasoftware.com/activescan/com/activescan_principal.htm

See if you can access this website:
http://www.tomcoyote.org/hjt/
and get the program: "HijackThis"
 
peak1013 said:
Hello,

I'm having a problem with my home page setting in IE6. I typically
have it set to msn.com, but lately it has been automatically changed
to a site called riviera.cc everytime I turn off my computer. Perhaps
I downloaded some virus or bug by mistake? If anyone has any advice
about how to get rid of this problem, please let me know.

Thanks in advance,
Matt
Click to expand...

First eliminate any scumware.
See
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Note that AdAware and SpyBot S & D will each catch some things the other
won't. Also, each need to be updated before every use, even when just
downloaded. There's also a lot more to do than just those two programs. In
your case especially see the CoolWebSearch section:
http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch
**Post your HijackThis log to
http://forums.spywareinfo.com/ or the Spyware forum at
http://forum.aumha.org/ for expert analysis, not here.**
Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder
may be found on this page:
http://aumha.org/a/parasite.htm.
If trying everything at that site does not fix the problem please post back
in the same thread.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/
 
peak1013,
riviera.cc uses an Exploit in unpatched browsers to hijack your machine.
[hxxp://promo.galdze.com%00%[email protected]]

Note: search-town redirects to Coolwebsearch (Trojan)

Dealing with Unwanted Malware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

You can download CWShredder 1.49.1 from:
http://www.majorgeeks.com/download4086.html

You can download HijackThis 1.97.7 from:
http://www.majorgeeks.com/download3155.html
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-12-04]
Please post replies to this Newsgroup, email address is invalid
--

peak1013 said:
Hello,

I'm having a problem with my home page setting in IE6. I typically have it
Click to expand...
set to msn.com, but lately it has been automatically changed to a site
called riviera.cc everytime I turn off my computer. Perhaps I downloaded
some virus or bug by mistake? If anyone has any advice about how to get rid
of this problem, please let me know.
 
Thanks for all the info posted -- it was most helpful.

I ran Ad-aware 6.0, CWShredder, and Pandasoft activescan, then checked the log in HijackThis. My start page does not change when I turn off the computer anymore so it seems to have done the job

Matt
 
Matt,
You're welcome .... glad to see you have things resolved.
_____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-12-04]
Please post replies to this Newsgroup, email address is invalid
--

peak1013 said:
Thanks for all the info posted -- it was most helpful.

I ran Ad-aware 6.0, CWShredder, and Pandasoft activescan, then checked the
Click to expand...
log in HijackThis. My start page does not change when I turn off the
computer anymore so it seems to have done the job.
 
I had exactly the same problem...until today.
Get HijackThis from the majorgeeks link below, perform a scan and
remove the entry:
O4 - HKLM\..\Run:[sys]regedit -s sysdll.reg
this worked for me (at last! ad-aware didnt....) finally an end to
search-town home page!
If anyone has any ideas who caused me this problem in the first place,
please let me know so I can go box thier face in!

Mike Burgess said:
peak1013,
riviera.cc uses an Exploit in unpatched browsers to hijack your machine.
[hxxp://promo.galdze.com %00%[email protected]]

Note: search-town redirects to Coolwebsearch (Trojan)

Dealing with Unwanted Malware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

You can download CWShredder 1.49.1 from:
http://www.majorgeeks.com/download4086.html

You can download HijackThis 1.97.7 from:
http://www.majorgeeks.com/download3155.html
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-12-04]
Please post replies to this Newsgroup, email address is invalid
--

peak1013 said:
Hello,

I'm having a problem with my home page setting in IE6. I typically have it
Click to expand...
set to msn.com, but lately it has been automatically changed to a site
called riviera.cc everytime I turn off my computer. Perhaps I downloaded
some virus or bug by mistake? If anyone has any advice about how to get rid
of this problem, please let me know.
Thanks in advance,
Matt
Click to expand...
Click to expand...
 
You must log in or register to reply here.

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Home Page Problems 2
Home Page select option disabled 1
What I thought was a Hijacked Home page 1
Inserted Links Only Open Home Page 6
Home Page Hijacked by MSN.COM 2
UNABLE TO SELECT HOME PAGE 2
Can't Change the Home Page 1
Home Page wont Stay 2

Back
Top