ARRRggh!!

  • Thread starter Thread starter Jason Fenstermaker
  • Start date Start date
J

Jason Fenstermaker

My homepage keeps getting changed to a search engine page. I have removed
spyware with S+D but it still keeps happening. Can anyone help?


-Jason
 
My homepage keeps getting changed to a search engine page. I have
removed spyware with S+D but it still keeps happening. Can anyone help?


-Jason
Click to expand...


Check your hosts file may be something to do with the QHosts trojan (see
any AV site about it).


HTH =)



Regards,

Ian
 
My homepage keeps getting changed to a search engine page. I have
removed
spyware with S+D but it still keeps happening. Can anyone help?
Click to expand...

What did you remove? Trojans change the registry and sometimes you need
to restore it to its default settings. Check for what ever S+D identified
as malware on Symantec's & Sophos' websites. They may offer detailed info
on what the Trojan has changed and instructions for manual removal.

I assume whatever it is, it changed your default settings in the registry
keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\
and
HKEY_CURRENT_USER\Software\Microsoft\Advanced INF Setup\IEHomePageInfo\

HEALTH WARNING: Do NOT change anything in there without first having
backed up your registry entry and then only do e x a c t l y what the
manual removal instructions say in the above websites! Do the wrong thing
and your OS may need reinstalling.

Alternatively, compare settings with an identical OS which you know is not
infected to establish what has changed in your registry.

Good luck,

Mick
 
Jason Fenstermaker said:
My homepage keeps getting changed to a search engine page. I have removed
spyware with S+D but it still keeps happening. Can anyone help?


-Jason
Click to expand...
You didn't mention which "search engine". If it is Cool Web Search or one
of it's many many many variations you really need CWS Shredder to get rid of
it. Had a little run in with those buggers myself.
Get CWS shredder and lots of other anti-spyware goodies here:
http://www.spywareinfo.com/downloads.php?cat=sp#s-p

Stella
 
You didn't mention which "search engine". If it is Cool Web Search or one
of it's many many many variations you really need CWS Shredder to get rid of
it. Had a little run in with those buggers myself.
Get CWS shredder and lots of other anti-spyware goodies here:
http://www.spywareinfo.com/downloads.php?cat=sp#s-p

Stella
Click to expand...

Right on, stella. Hijackers are getting so bad, CWS is being
updated almost daily - use the internal update feature.
http://www.spywareinfo.com/~merijn/files/cwshredder.zip

Most likely, Hijack This may be needed, which you can download here:
http://www.spywareinfo.com/~merijn/files/hijackthis.zip. See also,
HijackThis Quick Start Help, http://www.tomcoyote.org/hjt/

Info:
Trojans, are not detected by 'most' antivirus programs. AdAware and
SpybotSD are for 'spyware', not trojans. IF a trojan is detected,
use a special repair program, such as the two above, or you may
find yourself doing an 'un-necessary' re-install of windows.

Learn Safehex and stop getting infected.
http://www.claymania.com/safe-hex.html

BoB
For the duration of Swen, my address is inoperative.
 
Back
Top