Home page problem

[Albert B]

I having difficulties with my homepage, some site call
www.revolto.da.ru enter my database and store itself as my
forever homepage, I try everything, running Ad-aware,
Spyboot-search, Purge Ie pro, but this page still on the
memory of my computer when I restart it, is there anybody
out there who knows how to deal with this problem?, one
other thing do not try to access this web page (revolto),
because if you do, you will experience my same problem,
thanks.

 

[Todd Doane]

Thank you for the tip...

This virus seems to modify several registry entries. It creates a
file called sys.reg in your root directory c:\. For some reason the
find in regedt32 does not locate them all. Delete the keys that it
modifies below. You also need to change all of your network and
internet explorer search keys. You will also see other links that
start with http://vrape. Get rid of all of those. Delete the sys.reg
file, but open it with a text editor first and verify it looks like
the one below.


Below are the contents of the sys.reg file:

REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://revolto.da.ru/"
"Search Page"="http://revolto.da.ru/"
"Search Bar"="http://revolto.da.ru/"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"sys"="regedit /s sys.reg"