Home page Changes to Searchdot.net after reboot

  • Thread starter Thread starter Pittfall
  • Start date Start date
P

Pittfall

After reboot, my homepage changes to
http://www.searchdot.net. I have reset all registry key
entries, run latest version of Norton 2004 Professional,
AdAware 6.0, even uninstalled SP1 for IE 6 and reinstalled
with same result. This would not be so bad, however, there
is no site there and it freezes IE; after researching the
site and it's owners, it is connected to a porn site
www.hihost4all.com...I consider this maliscious code and
an extreme invasion of my computer! I have not downloaded
any programs or opened any attatchments from before this
happened??? Can anyone help?
 
Pittfall said:
After reboot, my homepage changes to
http://www.searchdot.net. I have reset all registry key
entries, run latest version of Norton 2004 Professional,
AdAware 6.0, even uninstalled SP1 for IE 6 and reinstalled
with same result. This would not be so bad, however, there
is no site there and it freezes IE; after researching the
site and it's owners, it is connected to a porn site
www.hihost4all.com...I consider this maliscious code and
an extreme invasion of my computer! I have not downloaded
any programs or opened any attatchments from before this
happened??? Can anyone help?
Click to expand...

This program was also not detected using SpyBot, so you'll have to
manually remove this. Start by searching the registry and replacing
all references of http://www.searchv.com and http://www.search.net
with http://www.google.com.

While still in the registry, browse to
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run and
delete the REG_SZ string called "sys". (This key automatically resets
your homepage at startup)

You can also delete the "sys.reg" file from your Windows directory -
i.e. c:\Windows\sys.reg or c:\Winnt\sys.reg.

-p.s. I believe this application was installed by taking advantage of
a pop-up security flaw in Internet Explorer that was resently
discovered. You should go to http://windowsupdate.microsoft.com and
download the latest Internet Explorer patches to prevent reinfection.

Good luck!

Carl
 
Back
Top