Homepage Hijacked

[john]

My normal homepage - Google - has been hijacked by
http:/tt.rack.cc/hp.php
It has disabled the homepage section in options which is
showing the unwanted http in negative lettering that you
cannot click.
Nothing I have tried seems to shift it and explorer seems
to have been affected by it with unwanted internet
connections popping up all the time on the bottom toolbar.
Can anyone help?

 

[Simon Geary]

http://support.microsoft.com/?id=320159

 

[Buz [MSFT]]

Yes there is a "trojan" going around that changes the home page.

Here is some more info on the home page and default search:

Some web pages will automatically and somewhat maliciously change your home
page or
configured search page for Internet Explorer wioht little or no interaction
from
you.

Here is some javascript that does this:
-------------------------------
document.body.style.behavior='url(#default#homepage)';
document.body.setHomePage('http://www.searching.net'); }
-------------------------------


I did some quick playing around and found that you can simply modify the
permissions on the following registry key:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
This is where the search and the home page entries are stored. Unfortunately
the
"Main" registry key houses many IE settings. So those wont be able to be
changed
either.
I removed System-Full Control and Administrators-Full Control and left my
own
account with just Read Access. After making these changes I was not able to
change
the search or home page (called Start Page in registry).

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.