Really strange thing with IE regarding homepage reset

[BrianC]

I must have visited some site that has put some sort of
..dll or .exe file on my computer that resets my homepage in
IE to a different site than I have designated. After I
reset my homepage to another site and reboot it resets it
to http://www.quick-search.ws/. I think that I may have a
strange .dll file in the IE folder because when I go to
delete it, it just keeps appearing back in the folder
(hmmapi.dll)

I've run Spybot and McFee virus detection and it can find it.
This is driving me nuts, please help.

 

[Frank Saunders, MS-MVP]

I must have visited some site that has put some sort of
.dll or .exe file on my computer that resets my homepage in
IE to a different site than I have designated. After I
reset my homepage to another site and reboot it resets it
to http://www.quick-search.ws/. I think that I may have a
strange .dll file in the IE folder because when I go to
delete it, it just keeps appearing back in the folder
(hmmapi.dll)

I've run Spybot and McFee virus detection and it can find it.
This is driving me nuts, please help.

See
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

 

[BrianC]

Frank - I tried using HijackThis and CWSShredder but it
doesn't work. HijackThis can find it and I check the box
to fix the problem, which it does until I reboot. Then the
same problem comes back. The following is the log that
HijackThis produces:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start
Page = www.maxxxhosters.com/search.php

I'm not sure how to go about removing this from the
registry so I went to the support formus and found the
article but it's not real clear in regards to exporting. I
don't want to screw anything up.

 

[Frank Saunders, MS-MVP]

Frank - I tried using HijackThis and CWSShredder but it
doesn't work. HijackThis can find it and I check the box
to fix the problem, which it does until I reboot. Then the
same problem comes back. The following is the log that
HijackThis produces:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start
Page = www.maxxxhosters.com/search.php

I'm not sure how to go about removing this from the
registry so I went to the support formus and found the
article but it's not real clear in regards to exporting. I
don't want to screw anything up.

Post the HijackThis log in
http://www.spywareinfo.com/forums/