Hijacked browser

  • Thread starter Thread starter frank
  • Start date Start date
F

frank

Whenever I start IE, the operation is interrupted with 3
events. First, the message 'no page to display' appears,
then changes to 'about blank Trusted start page', then
finally the page http://a-search.biz/?wmid=1010
comes up.
I have used spykillers and antivirus scans, erased all my
cookies and still it comes up. Has the IE exe file been
changed? Maybe I should uninstall and reinstall IE?
 
Can't Change My Home Page - It Keeps Resetting!
http://inetexplorer.mvps.org/answers.htm

Home Page Setting Changes Unexpectedly, or You Cannot Change Your Home Page Setting
http://support.microsoft.com/default.aspx?scid=kb;en-us;320159&Product=ie600

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx

---------------------------------------------------------------------------------

:

| Whenever I start IE, the operation is interrupted with 3
| events. First, the message 'no page to display' appears,
| then changes to 'about blank Trusted start page', then
| finally the page http://a-search.biz/?wmid=1010
| comes up.
| I have used spykillers and antivirus scans, erased all my
| cookies and still it comes up. Has the IE exe file been
| changed? Maybe I should uninstall and reinstall IE?
 
You have been infected by a porn dialer. The way to get
rid of it:

Clean from register with regedit:

HKEY_CLASSES_ROOT\clsid\{d8e25c53-9508-4f5c-9249-
d98d438891d5}
HKEY_CLASSES_ROOT\dyfuca_bh.bhobj
HKEY_CLASSES_ROOT\dyfuca_bh.bhobj.1
HKEY_CLASSES_ROOT\dyfuca_bh.sinkobj
HKEY_CLASSES_ROOT\dyfuca_bh.sinkobj.1
HKEY_CLASSES_ROOT\safesurfinghelper.iebho
HKEY_CLASSES_ROOT\safesurfinghelper.iebho.1
HKEY_CLASSES_ROOT\typelib\{00211813-6223-4c6a-be8d-
4d2676cd1361}
HKEY_CURRENT_USER\software\avenue media
HKEY_LOCAL_MACHINE\software\avenue media
HKEY_LOCAL_MACHINE\software\fci
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversio
n\run\safesurfingupdate
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversio
n\uninstal l\dyfuca
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversio
n\uninstal l\internet optimizer
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversio
n\uninstal l\internet optimizer active alert
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversio
n\uninstal l\internet optimizer software installer
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversio
n\uninstall\dyfuca
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversio
n\uninstall\internet optimizer
HKEY_LOCAL_MACHINE\software\safesurfing\update

Unregister this files, or erase them from DOS:
systemroot+\nem214.dll
systemroot+\wsem216.dll
wsem218.dll

kill this tasks with msconfig:
actalert.exe
c:\spedia\setup.exe
systemroot+\system32\ssupdate.exe
systemroot+\temp\thi6026.tmp\preinstt.exe
update.exe

files:
§ DyFuCA: actalert.exe · update.exe · wsem218.dll




-----Original Message-----
Can't Change My Home Page - It Keeps Resetting!
http://inetexplorer.mvps.org/answers.htm

Home Page Setting Changes Unexpectedly, or You Cannot Change Your Home Page Setting
http://support.microsoft.com/default.aspx?scid=kb;en- us;320159&Product=ie600

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.a spx
-----------------------

:

| Whenever I start IE, the operation is interrupted with
Click to expand...
3
 
Back
Top