Homepage Hijack

[Bob]

Group,
Hope someone can help me. Norton Anti-virus stopped several viruses last
weekend, but ever since then I can not keep my IE home page(google.com).
Everytime I select Google.com as my default homepage the next time I launch
IE it goes to drxcount.biz. I then reset to Google and the next time I
launch IE I am back to drxcount.biz. I ran Spybot and it detected a number
of spys which I deleted. Can someone tell me how to get rid off this?
Thanks,
Bob

 

[Robin T Cox]

Group,
Hope someone can help me. Norton Anti-virus stopped several viruses
last weekend, but ever since then I can not keep my IE home
page(google.com). Everytime I select Google.com as my default
homepage the next time I launch IE it goes to drxcount.biz. I then
reset to Google and the next time I launch IE I am back to
drxcount.biz. I ran Spybot and it detected a number of spys which I
deleted. Can someone tell me how to get rid off this? Thanks,
Bob

Download 'Hijack This!'. http://www.tomcoyote.org/hjt/
Unzip, doubleclick HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Press that, save the log, load it in Notepad, and copy its contents. Most
of what it lists will be harmless or even essential, don't fix anything
yet.

Then go to http://forums.spywareinfo.com/

Just sign in, or post as a guest,and go to the Spyware and Hijackware
Removal Support section. Press "new topic", explain your problem, and
copy and paste the contents of the Hijack This log into your new message.

 

[Matt Lazaric]

Group,
Hope someone can help me. Norton Anti-virus stopped several viruses last
weekend, but ever since then I can not keep my IE home page(google.com).
Everytime I select Google.com as my default homepage the next time I launch
IE it goes to drxcount.biz. I then reset to Google and the next time I
launch IE I am back to drxcount.biz. I ran Spybot and it detected a number
of spys which I deleted. Can someone tell me how to get rid off this?
Thanks,
Bob

Change your homepage setting in IE.

The offending page shouldn't come back.

 

[Ron]

I solved the problem by deleting all entries in the registry having
strings like "%64=420"(using regedit.exe). First of all, I searched
for "Start page" or "Search bar" to find out which strings are
obviously from drxcount.biz. I also deleted the file "sys.reg" because
this registry file contained references to this site (i.e. contained
strings like "......%64=420").
I put an empty sys.reg back in the windows system directory. A small
problem I have now is that, when I start up the PC, I get the message
that this sys.reg cannot be imported in the registry. At first I could
not start my IExplorer anymore, but I then used a different browser
and this also solved the problem for IEplorer. Perhaps someone can
tell me how I can either delete the instruction that a file called
"sys.reg" must be imported or replace this file by a clean one. (I use
Windows2000.)

 

[Matt Lazaric]

Quoth the raven named Matt Lazaric:


He said he did. "I then reset to Google ..."


This sounds a lot like the CoolWebSearch hijacker. Try the solution -
the CWShredder. Read about it here:
http://www.spywareinfo.com/~merijn/cwschronicles.html
and download from here:
http://www.spywareinfo.com/~merijn/downloads.html

If the above don't cure the problem, get this program
http://www.net-integration.net/tools/hijackthis.html
and submit the results to their forum.

My changed IE homepage setting lasted for about 3 start-ups and then
the Cool Web homepage started up again.

I went to majorgeeks.com and downloaded the CWShredder which appears
to have worked.