MSIE hijacked

[^~Edd~^]

My MSIE has been hijacked .. home page and search changed and can't be
altered .. also old "restore points" are gone. I updated and ran "Spybot"
and "Ad-Aware" but neither helped solve the problem. Tried to access
"microtrends housecall" to scan for problems but keep getting error message
and it will not allow me to access that website.
Home Page in MSIE is something called "about:blank". Browser keeps taking me
to page with the Microsoft logo on it .. purporting to be a Microsoft Site
....http://www.Xmsnprotection.com/search.php?pin=28129. (remove X)

with the follow error message (among others)

"My settings have changed and I can't change them back to the way they were.
Some unwanted software has the ability to change your home page or search
page
settings. This means that the page that opens first when you start your
Internet browser or the page that appears when you select "search" may be
pages that you do not recognize. Even if you know how to adjust these
settings,
you may find that they revert back every time you restart your computer. "

It keeps taking me to pages that are trying to get me to BUY and download
removal programs

namerd "error nuker" and "Stopzilla"

also the following webpage for scanning

"http://Xspywarebegone.com/findwhat/download.html" (remove X)

How can I remove and repair the damage done by this? Or can anyone suggest a
website that I can access for help?

(e-mail address removed)

 

[Carey Frisch [MVP]]

Download and run a scan:

Microsoft Windows AntiSpyware (Beta)
http://www.microsoft.com/downloads/...a2-6a57-4c57-a8bd-dbf62eda9671&displaylang=en

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User
Microsoft Newsgroups

Get Windows XP Service Pack 2 with Advanced Security Technologies:
http://www.microsoft.com/athome/security/protect/windowsxp/choose.mspx

-------------------------------------------------------------------------------------------

:

| My MSIE has been hijacked .. home page and search changed and can't be
| altered .. also old "restore points" are gone. I updated and ran "Spybot"
| and "Ad-Aware" but neither helped solve the problem. Tried to access
| "microtrends housecall" to scan for problems but keep getting error message
| and it will not allow me to access that website.
| Home Page in MSIE is something called "about:blank". Browser keeps taking me
| to page with the Microsoft logo on it .. purporting to be a Microsoft Site
| ...http://www.Xmsnprotection.com/search.php?pin=28129. (remove X)
|
| with the follow error message (among others)
|
| "My settings have changed and I can't change them back to the way they were.
| Some unwanted software has the ability to change your home page or search
| page
| settings. This means that the page that opens first when you start your
| Internet browser or the page that appears when you select "search" may be
| pages that you do not recognize. Even if you know how to adjust these
| settings,
| you may find that they revert back every time you restart your computer. "
|
| It keeps taking me to pages that are trying to get me to BUY and download
| removal programs
|
| namerd "error nuker" and "Stopzilla"
|
| also the following webpage for scanning
|
| "http://Xspywarebegone.com/findwhat/download.html" (remove X)
|
| How can I remove and repair the damage done by this? Or can anyone suggest a
| website that I can access for help?

 

[Guest]

Indeed !
The Advanced Tools of this program have an option called 'Browser Restore'
... try that.

 

[EAustin]

This really helped .. so far at least. Thanks for the help!

 

[EAustin]

It worked but was not a permanent fix ... as soon as I shut the browser down
and then start it up again .. all the hijacked settings return. Even when I
use the "Browser Restore" function .. everything is ok until I shut the
browser down. when I open it back up .. it is hijacked again.
The "Microsoft Windows AntiSpyware (Beta)" says it is removing the threat
but it is only temporary.
Any other ideas? I can'rt get to the "trendmicro.housecalls" website .. it
won't let me go there .. says there is a Windows and has to shut down