I visited a site called rational-fin.com (don't go there) and now when
I use IE 7.0 (XP Pro SP2) and go to Google, rational-fin.com is
already in the search box and I need to get rid of it.
I've tried booting in safe mode, deleting IE files, run several
malware tools but the Google search box still has rational-fin.com
"preloaded".
I read that Google doesn't keep this history itself - it is somewhere
in the IE files, but even after deleting all IE files (from the IE
options) it still shows up.
I have also uninstalled and reinstalled IE, but still have the
problem.
Just where does IE keep this information so I can delete it?
Aola Jose,
Clear your caches, Internet files and delete cookies, then Open the Windows
Explorer and locate this path:
C:\Windows\System32\drivers\etc = look in the Right Pane/window for this
file called the HOSTS file but not the one with the extension *.SAM* leave
this as is.
If you can't see it try to click Tools >> Folder Options and select show
Hidden files and folder, then right Click the Hosts file and select open with
Notepad.
There see any reference for that site and remove it, you Hosts file will
looks like this:
# 102.54.94.97 rhino.acme.com # Source server
# 38.25.63.10 x.acme.com # Client Host
127.0.0.1 LocalHost
------------------------------------------
Remove all other References other than those above.
Download the Spybot from here:
http://www.safer-networking.org
= Open the RUN command and type regedit32.exe
or regedit.exe and Click OK ( make sure you are editing the right Keys or
you will render your system useless).
In the registry Editor click on these KEYs and change the search Bar and
search Page to what you want instead of this site:
[-] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main.
Loook in the Right Pane/Window for Local Page Right click on it and select
Modify.
In the new window Input the Data C:\WINDOWS\SYSTEM\blank.htm and click OK.
Search Bar REG_SZ
http://www.microsoft.com
Search Page REG_SZ
Then Locate *Start Page* and there put the New Home page you want, Right
Click on it and select Modify and in the Data:
http://www.bbc.co.ukfor Ex
and click OK.
The same on this KEY:
[-] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main.
Local Page change to C:\WINDOWS\SYSTEM\blank.htm.
Start Page
:
http://www.microsoft.com/isapi/reddir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
click Ok and Exit the Registry Editor change the home page on the IE
Properties also and Reboot and see if the issue resolved.
Search Bar REG_SZ
http://www.microsoft.com
Search Page REG_SZ
= Download the Hijackthis and send the report to one of many
forums for analysis and troubleshooting:
When all else fails, HijackThis v1.99.1
(
http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log tohttp://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,http://forums.subratam.org/index.php?showforum=7, or other appropriate
forums for expert analysis, not here.
HTH.
Please let us know.
Regards,
nass
----www.nasstec.co.uk- Hide quoted text -
- Show quoted text -
