Homepage Hijacked

S

Sharon Miller

HI--about a week ago I had a whole bunch of problems with my homepage being
hijacked and my computer being taken over by some miserable scumware. After
installing Spy Sweeper and Popup Stopper, I thought I was back to normal,
but that doesn't seem to be the case. While using IE 6 this morning, I
clicked on my little global search button and was directed to a search
engine I never heard of and once again, my home page was hijacked.

I need to know how to get rid of what ever this recurring garbage is that
has planted itself on my computer. Can anyone help me with this or perhaps
direct me to some place that can provide the needed info to deal with this
junk once and for all?

Thanking you in advance for any assistance,

Sharon
 
M

mac

Sharon Miller said:
HI--about a week ago I had a whole bunch of problems with my homepage being
hijacked and my computer being taken over by some miserable scumware. After
installing Spy Sweeper and Popup Stopper, I thought I was back to normal,
but that doesn't seem to be the case. While using IE 6 this morning, I
clicked on my little global search button and was directed to a search
engine I never heard of and once again, my home page was hijacked.

I need to know how to get rid of what ever this recurring garbage is that
has planted itself on my computer. Can anyone help me with this or perhaps
direct me to some place that can provide the needed info to deal with this
junk once and for all?

Thanking you in advance for any assistance,

Sharon
Click to expand...

Run the "Cool Web Shredder"
check for update first!!!!!!!!!!!!!!!!!!!!!!
http://www.merijn.org/files/CWShredder.exe
Close all instances of Internet Explorer and Outlook Express,
click on the executable above and follow the prompts.
 
R

Ramesh [MVP]

Home Page Setting Changes Unexpectedly
http://www.mvps.org/sramesh2k/IEFAQ.htm

--
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k

-------------------------------------------
Prevent Spyware from being installed:
http://www.mvps.org/sramesh2k/Malware_Defence.htm

Prevent malware from being installed - Part 2:
http://www.mvps.org/sramesh2k/MalwareDefence_Example.htm
-------------------------------------------

HI--about a week ago I had a whole bunch of problems with my homepage being
hijacked and my computer being taken over by some miserable scumware. After
installing Spy Sweeper and Popup Stopper, I thought I was back to normal,
but that doesn't seem to be the case. While using IE 6 this morning, I
clicked on my little global search button and was directed to a search
engine I never heard of and once again, my home page was hijacked.

I need to know how to get rid of what ever this recurring garbage is that
has planted itself on my computer. Can anyone help me with this or perhaps
direct me to some place that can provide the needed info to deal with this
junk once and for all?

Thanking you in advance for any assistance,

Sharon
 
S

Sharon Miller

I ran Ad-aware and found additional items and removed them. I then clicked
on my little global search button and it came up completely blank. I got
this error report:

AppName: iexplore.exe
AppVer: 6.0.2800.1106
ModName: shell32.dll
ModVer: 4.72.3110.6
Offset: 0000240f

I'm guessing I deleted something I shouldn't have. Soooooo.....how do I fix
this latest problem? BTW, I'm running Win98.


Home Page Setting Changes Unexpectedly
http://www.mvps.org/sramesh2k/IEFAQ.htm

--
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k

-------------------------------------------
Prevent Spyware from being installed:
http://www.mvps.org/sramesh2k/Malware_Defence.htm

Prevent malware from being installed - Part 2:
http://www.mvps.org/sramesh2k/MalwareDefence_Example.htm
-------------------------------------------

HI--about a week ago I had a whole bunch of problems with my homepage being
hijacked and my computer being taken over by some miserable scumware. After
installing Spy Sweeper and Popup Stopper, I thought I was back to normal,
but that doesn't seem to be the case. While using IE 6 this morning, I
clicked on my little global search button and was directed to a search
engine I never heard of and once again, my home page was hijacked.

I need to know how to get rid of what ever this recurring garbage is that
has planted itself on my computer. Can anyone help me with this or perhaps
direct me to some place that can provide the needed info to deal with this
junk once and for all?

Thanking you in advance for any assistance,

Sharon
 
R

Ramesh [MVP]

Check this one: http://support.microsoft.com/?kbid=249064

Addresses both issues in the same KB.

--
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k

-------------------------------------------
Prevent Spyware from being installed:
http://www.mvps.org/sramesh2k/Malware_Defence.htm

Prevent malware from being installed - Part 2:
http://www.mvps.org/sramesh2k/MalwareDefence_Example.htm
-------------------------------------------

I ran Ad-aware and found additional items and removed them. I then clicked
on my little global search button and it came up completely blank. I got
this error report:

AppName: iexplore.exe
AppVer: 6.0.2800.1106
ModName: shell32.dll
ModVer: 4.72.3110.6
Offset: 0000240f

I'm guessing I deleted something I shouldn't have. Soooooo.....how do I fix
this latest problem? BTW, I'm running Win98.


Home Page Setting Changes Unexpectedly
http://www.mvps.org/sramesh2k/IEFAQ.htm

--
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k

-------------------------------------------
Prevent Spyware from being installed:
http://www.mvps.org/sramesh2k/Malware_Defence.htm

Prevent malware from being installed - Part 2:
http://www.mvps.org/sramesh2k/MalwareDefence_Example.htm
-------------------------------------------

HI--about a week ago I had a whole bunch of problems with my homepage being
hijacked and my computer being taken over by some miserable scumware. After
installing Spy Sweeper and Popup Stopper, I thought I was back to normal,
but that doesn't seem to be the case. While using IE 6 this morning, I
clicked on my little global search button and was directed to a search
engine I never heard of and once again, my home page was hijacked.

I need to know how to get rid of what ever this recurring garbage is that
has planted itself on my computer. Can anyone help me with this or perhaps
direct me to some place that can provide the needed info to deal with this
junk once and for all?

Thanking you in advance for any assistance,

Sharon
 
S

Sharon Miller

Thank you for all your help so far. I took a second look at Ad-aware and
found that the items I thought were deleted were actually in quarantine.
(So I know where the shell32 thing is and three other registry items also.)

If I restore them, I'll be restoring the scumware with it. How do I proceed
from this point? (I feel a bit intimidated by the registry, considering all
the dire warnings I've read about tinkering with it.)


Check this one: http://support.microsoft.com/?kbid=249064

Addresses both issues in the same KB.

--
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k

-------------------------------------------
Prevent Spyware from being installed:
http://www.mvps.org/sramesh2k/Malware_Defence.htm

Prevent malware from being installed - Part 2:
http://www.mvps.org/sramesh2k/MalwareDefence_Example.htm
-------------------------------------------

I ran Ad-aware and found additional items and removed them. I then clicked
on my little global search button and it came up completely blank. I got
this error report:

AppName: iexplore.exe
AppVer: 6.0.2800.1106
ModName: shell32.dll
ModVer: 4.72.3110.6
Offset: 0000240f

I'm guessing I deleted something I shouldn't have. Soooooo.....how do I fix
this latest problem? BTW, I'm running Win98.
 
R

Ramesh [MVP]

Let the items be there in quarantine. Don't restore them. Or, let's have that as last resort.

Did you try this, BTW? http://support.microsoft.com/?kbid=249064

--
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k
-------------------------------------------
Prevent Spyware from being installed:
http://www.mvps.org/sramesh2k/Malware_Defence.htm

Prevent malware from being installed - Part 2:
http://www.mvps.org/sramesh2k/MalwareDefence_Example.htm
-------------------------------------------


Thank you for all your help so far. I took a second look at Ad-aware and
found that the items I thought were deleted were actually in quarantine.
(So I know where the shell32 thing is and three other registry items also.)

If I restore them, I'll be restoring the scumware with it. How do I proceed
from this point? (I feel a bit intimidated by the registry, considering all
the dire warnings I've read about tinkering with it.)


Check this one: http://support.microsoft.com/?kbid=249064

Addresses both issues in the same KB.

--
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k

-------------------------------------------
Prevent Spyware from being installed:
http://www.mvps.org/sramesh2k/Malware_Defence.htm

Prevent malware from being installed - Part 2:
http://www.mvps.org/sramesh2k/MalwareDefence_Example.htm
-------------------------------------------

I ran Ad-aware and found additional items and removed them. I then clicked
on my little global search button and it came up completely blank. I got
this error report:

AppName: iexplore.exe
AppVer: 6.0.2800.1106
ModName: shell32.dll
ModVer: 4.72.3110.6
Offset: 0000240f

I'm guessing I deleted something I shouldn't have. Soooooo.....how do I fix
this latest problem? BTW, I'm running Win98.
 
S

Sharon Miller

Ramesh--I re-read the FAQs on your pages and the MS bulletin and realized I
had missed something the first time around. I applied the solutions
mentioned on your pages plus installed the registry search function from the
link you had to Kelly's Korner. Things seem to be back to normal.

Thank you for all your help--it is most appreciated. :)

Sharon

Let the items be there in quarantine. Don't restore them. Or, let's have
that as last resort.

Did you try this, BTW? http://support.microsoft.com/?kbid=249064

--
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k
-------------------------------------------
Prevent Spyware from being installed:
http://www.mvps.org/sramesh2k/Malware_Defence.htm

Prevent malware from being installed - Part 2:
http://www.mvps.org/sramesh2k/MalwareDefence_Example.htm
-------------------------------------------


Thank you for all your help so far. I took a second look at Ad-aware and
found that the items I thought were deleted were actually in quarantine.
(So I know where the shell32 thing is and three other registry items also.)

If I restore them, I'll be restoring the scumware with it. How do I proceed
from this point? (I feel a bit intimidated by the registry, considering all
the dire warnings I've read about tinkering with it.)
 
R

Ramesh [MVP]

Most welcome, Sharon :)

--
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k

-------------------------------------------
Prevent Spyware from being installed:
http://www.mvps.org/sramesh2k/Malware_Defence.htm

Prevent malware from being installed - Part 2:
http://www.mvps.org/sramesh2k/MalwareDefence_Example.htm
-------------------------------------------

Ramesh--I re-read the FAQs on your pages and the MS bulletin and realized I
had missed something the first time around. I applied the solutions
mentioned on your pages plus installed the registry search function from the
link you had to Kelly's Korner. Things seem to be back to normal.

Thank you for all your help--it is most appreciated. :)

Sharon

Let the items be there in quarantine. Don't restore them. Or, let's have
that as last resort.

Did you try this, BTW? http://support.microsoft.com/?kbid=249064

--
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k
-------------------------------------------
Prevent Spyware from being installed:
http://www.mvps.org/sramesh2k/Malware_Defence.htm

Prevent malware from being installed - Part 2:
http://www.mvps.org/sramesh2k/MalwareDefence_Example.htm
-------------------------------------------


Thank you for all your help so far. I took a second look at Ad-aware and
found that the items I thought were deleted were actually in quarantine.
(So I know where the shell32 thing is and three other registry items also.)

If I restore them, I'll be restoring the scumware with it. How do I proceed
from this point? (I feel a bit intimidated by the registry, considering all
the dire warnings I've read about tinkering with it.)
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

hijacked iexplorer 3
Internet homepage hijacked 2
IE has been hijacked 3
use default button hijacked 3
I've been hijacked 4
IE Default Homepage has been Hijacked 1
lock homepage? Damn "about:blank" 1
about:this hijacked my cool web search please help. 17

Top