Hijacked Home Page

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

My home page defaults to "Easy-Search.Biz." No matter how often I change it,
it pops back. Worse, it blocks me from certain sites or dumps me into others.

Problem began after my hard drive crashed and I rebuilt. I have the
Mircosoft Beta spyware, New Norton's, Spysubtract preventing changes (not),
Spytsweeper and Ad-Aware running checks and still the page won't change.

Near as I can guess, the spyware resides someplace and resets my home page
on a regular basis. I found "msqdevl.exe" and deactivated it. It displayed
the startup page but nothing changed.

Am about at the "take it to the shop" stage.

What can be done?
 
Genghiss said:
My home page defaults to "Easy-Search.Biz." No matter how often I
change it, it pops back. Worse, it blocks me from certain sites or
dumps me into others.

Problem began after my hard drive crashed and I rebuilt. I have the
Mircosoft Beta spyware, New Norton's, Spysubtract preventing changes
(not), Spytsweeper and Ad-Aware running checks and still the page
won't change.

Near as I can guess, the spyware resides someplace and resets my home
page on a regular basis. I found "msqdevl.exe" and deactivated it. It
displayed the startup page but nothing changed.

Am about at the "take it to the shop" stage.

What can be done?
Click to expand...

First, if you don't have WinXP SP2, get LSP-Fix - a free program to repair
damaged Winsock 2 stacks
http://www.cexx.org/lspfix.htm
save it because you might need to repair the Winsock 2 stacks after removing
the culprit.
For WinXP SP2 this command will restore the Winsock stacks if you can't
connect after clearing the malware.
Go to Start | Run and type
CMD
In the command window type
netsh winsock reset
Then get CWShredder
http://www.intermute.com/products/cwshredder.html

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/security/protect/default.aspx
 
Nothing has changed. My home page is still "easy-search.biz"

I have WinXP SP2 and ran it. Then restarted and ran CWShredder. After the
run the messsage was that "CoolWebSearch" wasn't found on the computer.

Still getting spyware warnings and that my home page is being hijacked (not
that any program seems to have been able to fix msn.com or any homepage)
 
Genghiss said:
Nothing has changed. My home page is still "easy-search.biz"

I have WinXP SP2 and ran it. Then restarted and ran CWShredder. After
the run the messsage was that "CoolWebSearch" wasn't found on the
computer.

Still getting spyware warnings and that my home page is being
hijacked (not that any program seems to have been able to fix msn.com
or any homepage)
Click to expand...

Go to: http://mvps.org/winhelp2002/unwanted.htm
Download "Hijack This!" [freeware]

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates: "hijackthis.log")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, go to the "Spyware and Hijackware Removal" section.
Press "New Topic" and post a description of your symptoms. If they need to
see your log they will ask for it.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/security/protect/default.aspx
 
Back
Top