G
Guest
Malware has changed the home page and the search bar address in Windows XP
Home Edition Guest account. How do I change them back?
Home Edition Guest account. How do I change them back?
J
Jan Il
Hi marcerickson 
You don't mention the version of Windows you are using, not, the name of the
malware, if known.
If you have already fully cleaned your system of the scumware, try the
following:
Restore search functions
http://www.kellys-korner-xp.com/regs_edits/RestoreSearch2.REG
to restore your search functions
Home Page Setting Changes Unexpectedly,
or You Cannot Change Your Home Page Setting
http://support.microsoft.com/default.aspx?kbid=320159&product=ie
also...if you have SpyBot and use the Immunizer check the following:
Unlock by unchecking the option to "Protect IE Control
Panel".
See http://forums.spywareinfo.com/index.php?showtopic=6748
If you have not yet fully cleaned your system, you can't change them back
until you do:
Control Panel>Internet Options>Advanced>UNcheck "Enable third
party browser extensions." If this corrects the problem then you system is
infected.
(Be sure to re-check Enable third party browser extension safter the
cleanup)
Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm
http://www.mvps.org/sramesh2k/Malware_Defence.htm
If all of the above fails, download and install HiJackThis. This is one of
the most important steps. Follow all instructions carefully. This program
should be run in Normal mode.
How to download and install HiJackThis: Win 98-XP
http://www.download.com/HijackThis/3000-8022_4-10227353.html
Please.. DO NOT post your log HiJackThis log to this newsgroup. DO NOT
delete anything from the list yourself unless you are an experienced user of
this program. It is important that you post your log on one of the
HiJackThis Support Forums below and allow the experts there to analyze it
for you:
AumHa HiJackThis Forum
http://forum.aumha.org/viewforum.php?f=30
to allow the experts there to evaluate your log and advise you of any
necessary steps to clean your system.
(Note: You will have to Register before posting on these Forums. Please
follow all posting instructions carefully to avoid having your log deleted
or ignored.)
Hope this helps.
Jan
MS MVP - Windows IE/OE [DTS/AumHa]
Smiles are meant to be shared,
that's why they're so contagious.
Replies are posted only to the newsgroup for the benefit or other readers.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm
The forums are very busy, please be patient.
You don't mention the version of Windows you are using, not, the name of the
malware, if known.
If you have already fully cleaned your system of the scumware, try the
following:
Restore search functions
http://www.kellys-korner-xp.com/regs_edits/RestoreSearch2.REG
to restore your search functions
Home Page Setting Changes Unexpectedly,
or You Cannot Change Your Home Page Setting
http://support.microsoft.com/default.aspx?kbid=320159&product=ie
also...if you have SpyBot and use the Immunizer check the following:
Unlock by unchecking the option to "Protect IE Control
Panel".
See http://forums.spywareinfo.com/index.php?showtopic=6748
If you have not yet fully cleaned your system, you can't change them back
until you do:
Control Panel>Internet Options>Advanced>UNcheck "Enable third
party browser extensions." If this corrects the problem then you system is
infected.
(Be sure to re-check Enable third party browser extension safter the
cleanup)
Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm
http://www.mvps.org/sramesh2k/Malware_Defence.htm
If all of the above fails, download and install HiJackThis. This is one of
the most important steps. Follow all instructions carefully. This program
should be run in Normal mode.
How to download and install HiJackThis: Win 98-XP
http://www.download.com/HijackThis/3000-8022_4-10227353.html
Please.. DO NOT post your log HiJackThis log to this newsgroup. DO NOT
delete anything from the list yourself unless you are an experienced user of
this program. It is important that you post your log on one of the
HiJackThis Support Forums below and allow the experts there to analyze it
for you:
AumHa HiJackThis Forum
http://forum.aumha.org/viewforum.php?f=30
to allow the experts there to evaluate your log and advise you of any
necessary steps to clean your system.
(Note: You will have to Register before posting on these Forums. Please
follow all posting instructions carefully to avoid having your log deleted
or ignored.)
Hope this helps.
Jan
MS MVP - Windows IE/OE [DTS/AumHa]
Smiles are meant to be shared,
that's why they're so contagious.
Replies are posted only to the newsgroup for the benefit or other readers.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm
The forums are very busy, please be patient.
G
Guest
You can change the address back by following these steps,
1. Right click on internet explorer button (not a shortcut)
2. Click properties
3. Under "Home page" you will se a long strip of text click it it will
become blue
4. Type your home page adress
5. Click the "ok" button on the bottom
Hope this helps!!!!!!
-Adam
1. Right click on internet explorer button (not a shortcut)
2. Click properties
3. Under "Home page" you will se a long strip of text click it it will
become blue
4. Type your home page adress
5. Click the "ok" button on the bottom
Hope this helps!!!!!!
-Adam
J
Jan Il
Hi Adam
I am not the OP, but, I have tried to follow along with your instructions,
and I can't seem to relate to which IE *button* you are referring to. Could
you please clarify the location.
Jan
MS MVP - Windows IE/OE [DTS/AumHa]
Smiles are meant to be shared,
that's why they're so contagious.
I am not the OP, but, I have tried to follow along with your instructions,
and I can't seem to relate to which IE *button* you are referring to. Could
you please clarify the location.
Jan
MS MVP - Windows IE/OE [DTS/AumHa]
Smiles are meant to be shared,
that's why they're so contagious.
G
Guest
At the end u have to click either "ok" or "apply" and not cancel.
J
Jan Il
Adam said:
No no...I meant the
Right click on internet explorer button (not a shortcut)
Where is this button you are talking about? The desktop, in Windows
Explorer, the Address bar...?
Jan
MS MVP - Windows IE/OE [DTS/AumHa]
Smiles are meant to be shared,
that's why they're so contagious.
Replies are posted only to the newsgroup for the benefit or other readers.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm
G
Guest
oh
on the desktop you have to left click on the internet explorer picture.
Then, you click on properties
on the desktop you have to left click on the internet explorer picture.
Then, you click on properties
J
Jan Il
Adam said:
Thank you. I don't have one there, just the shortcut. But, I can access it
from the Start button. Hopefully, the original posters will.
Jan
MS MVP - Windows IE/OE [DTS/AumHa]
Smiles are meant to be shared,
that's why they're so contagious.
G
Guest
Thanks for all the help. I didn't mention in the OP that I'd already cleaned
all of the crapware out of the box.
The problem with not being able to change the home page in the Guest account
was Norton Internet Security's Home Page Protection feature (wierdly, Norton
puts this feature in the Norton Antivirus settings). I'm assuming that in the
Administrator level accounts, Norton looked at the level of privilege that
the account had and decided it was OK for that user to change the home page -
but not so for the Guest account. Once I turned off the Home Page Protection
feature in an Administrator account, I could reset all the IE settings in
everyone's account using the .reg file Jan Il pointed me to. Thanks, Jan -
I've used Kelly's site before but didn't think to look there this time.
Thanks for all the help,
Marc
all of the crapware out of the box.
The problem with not being able to change the home page in the Guest account
was Norton Internet Security's Home Page Protection feature (wierdly, Norton
puts this feature in the Norton Antivirus settings). I'm assuming that in the
Administrator level accounts, Norton looked at the level of privilege that
the account had and decided it was OK for that user to change the home page -
but not so for the Guest account. Once I turned off the Home Page Protection
feature in an Administrator account, I could reset all the IE settings in
everyone's account using the .reg file Jan Il pointed me to. Thanks, Jan -
I've used Kelly's site before but didn't think to look there this time.
Thanks for all the help,
Marc
Jan Il said:Adam said:
Thank you. I don't have one there, just the shortcut. But, I can access it
from the Start button. Hopefully, the original posters will.
Jan
MS MVP - Windows IE/OE [DTS/AumHa]
Smiles are meant to be shared,
that's why they're so contagious.
J
Jan Il
Hi Marc
You're very welcome! I'm very glad to hear you were able to resolve your
problem. Good job!
Thank you very much for posting back and letting us know what worked for
you, and for the benefit of other readers who might have a similar problem.
Jan
MS MVP - Windows IE/OE [DTS/AumHa]
Smiles are meant to be shared,
that's why they're so contagious.
You're very welcome! I'm very glad to hear you were able to resolve your
problem. Good job!
Thank you very much for posting back and letting us know what worked for
you, and for the benefit of other readers who might have a similar problem.
Jan
MS MVP - Windows IE/OE [DTS/AumHa]
Smiles are meant to be shared,
that's why they're so contagious.
Jan Il said:Adam said:
Thank you. I don't have one there, just the shortcut. But, I can access
it
from the Start button. Hopefully, the original posters will.
Jan
MS MVP - Windows IE/OE [DTS/AumHa]
Smiles are meant to be shared,
that's why they're so contagious.