Strange Home-Page Error

[Shaun]

Hi,

whenever I restart my PC my home page changes to http://cool-search.net/
even when I change it to my preference of http://www.google.co.uk. Has
anyone else experienced this?

Thanks for your help

 

[Chris Lanier]

Greetings --

Try a SpyWare scan, please run SpyBot

SpyBot
http://www.safer-networking.org/

 

[Jimmy S.]

Hi Shaun,

I've heard of that many times before...
Run Spybot from: http://security.kolla.de to remove all Adware from your system.

--
Cheers, Windows XP MVP Shell / User
Jimmy S. http://mvp.support.microsoft.com

Game FAQs: http://support.microsoft.com/default.aspx?scid=FH;[LN];gms
Visit my Zone.com / Gaming Helpsite: http://nibblesnbits.tk or Call / Contact
MS Support at: http://support.microsoft.com/default.aspx?scid=sz;en-us;top
My advice is donated "AS IS" without warranty; nor do I confer any rights.
_________________________________________________________

| Hi,
|
| whenever I restart my PC my home page changes to http://cool-search.net/
| even when I change it to my preference of http://www.google.co.uk. Has
| anyone else experienced this?
|
| Thanks for your help
|
|

 

[anonymous]

Home Page Setting Changes Unexpectedly, or You Cannot
Change your Home Page Setting
http://support.microsoft.com/?kbid=320159

-----Original Message-----
Hi,

whenever I restart my PC my home page changes to http://cool-search.net/
even when I change it to my preference of

http://www.google.co.uk. Has

 

[mamabear]

-----Original Message-----
Hi,

whenever I restart my PC my home page changes to http://cool-search.net/
even when I change it to my preference of

http://www.google.co.uk. Has

anyone else experienced this?

Thanks for your help


.
Download Adaware (free version) from

http://majorgeeks.com/download.php?det=506
It detects and safely removes dataminers, tracking
cookies, trackware, dialers, BHO's and other objects from
your computer. This link will help you configure AAW for
your first scan: http://www.lavasoftsupport.com/index.php?
showtopic=11613
If you have any questions, their forums are here:
http://www.lavasoftsupport.com/
It's very important that you update your ref files after
installing and before each scan because they are updated
frequently. Click on the globe or "Check For Updates Now".

 

[Shaun]

Thank you for your replies,

But even after using the program it fixed it for about 48 hours then it
happened again!

Any ideas?

 

[Kelly]

Hi Shaun,

Home Page Lock and Unlock for Internet Explorer (Line 63)
http://www.kellys-korner-xp.com/xp_tweaks.htm

 

[Dan]

I resolved the problem...so far... by using StartupList.exe (found at
spywareinfo.com). The report showed an unrecognized dll under the
section Enumerating Browser Helper Objects:

C:\WINDOWS\msammj.dll - {1F48AA48-C53A-4E21-85E7-AC7CC6B5FFB1}


(msammj.dll is probably a randomly generated name)

Deleting this file and removing the reference to it in the registry
seems to have rid my system of that scurge.

Just to be sure, I pulled up my temp folder (In the address bar type:
%temp%) and watched for a recurring temp file. The temp file would
always re-appear after closing IE.

An extra measure I took was to rename that temp file with .txt
extension, edited it notepad to remove the code, renamed it back to
..tmp then made it read-only.

Additionally, to prevent any running code from attempting to write to
the disk (thereby recreating the malicious code) I did a hard shutdown
with the power switch. I don't know for sure it was needed - or even
did any good - but, hey, this bastard was pissing me off!

I have not had a repeat of the cool-search.net browser hijack since.

Good Luck!