Forum Home
Press F1
 
Thread ID: 43529 2004-03-17 19:55:00 homepage changed by web srm33 (3954) Press F1
Post ID Timestamp Content User
223330 2004-03-17 19:55:00 My homepage keeps changing to a site I do not want to go to, which I havent even been to, although Im not sure the children accepted something by mistake.

The homepage is actaully loaded on the c drive, and when I delete it, it still manages to relaod at next or later start.

What can I delete to get rid of this?
srm33 (3954)
223331 2004-03-17 20:07:00 Have a look in the FAQs about homepage hijacking and also run a search (here at Pressf1) for those words like 'hijacker' 'homepage' and have a look at thr threads that come up.

This is a very common problem.

Then, if you are still using IE get Spybot Search & Destroy and lock down your homepage or even switch to another browser like Opera or Mozilla. Have a cruise back thru the pages here too, there are lots of cases of this, HTH :D
mark c (247)
223332 2004-03-17 20:16:00 If you could tell us what site the homepage is set to, we may pin it down easier.

Try CWShredder from here (www.majorgeeks.com) first. Other good programs (well worth keeping on your PC) are Adaware (www.majorgeeks.com) and Spybot. (www.pcworld.com)
These programs do similar things, but they both have weaknesses. Combined, they complement each other to minimise the weakness. A brief explanation of what these programs do can be read on the Adaware site here (http://www.lavasoftusa.com/)
Pheonix (280)
223333 2004-03-17 21:06:00 Perfect so far!
Each found more so worth all of them.

Thanks very much
srm33 (3954)
223334 2004-03-19 18:24:00 Not so perfect after all!

Used all 3 recommended programs. CWShedder found nothing. Adaware found lots, but not sure what to clean- somehow managed to remove my favorites. These included cookies, what seems like normal programs and the following
MSCONNECT
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
obj[2]=RegValue : Software\Netscape\Netscape Navigator\Viewers
obj[3]=RegKey : .cxq
obj[4]=RegKey : .mxq

Spybot finds tracking cookies.

The site that is saved on my c drive and then linked to is www.24start.com

Can anyone let me know where to next? And how to get my favorites back would be nice also!

Thanks so much

srm
srm33 (3954)
223335 2004-03-19 20:22:00 1. To get your favourites back just repeat how you got them in the first place, i.e. go there and bookmark them or 'add to favourites' in Intenet Explorer.

2. Can't find much about 24start in Google (try another search engine) except related to some dutch adult site. Try hunting for every instance of it (24start) on your machine and sending it to the bin.

3. Using Spybot, under advanced / tools / browser pages you can lock down your homepage, try that. Make sure you know what you want you homepage to be and choose that and make the others 'blank page'.

Try it and come back and report. HTH :D

I'll have another look see if I can find something about it because you won't be the only one infected and postings will be up somewhere about it.
mark c (247)
223336 2004-03-19 21:16:00 Regarding getting your favorites back, have you looked in Adaware's quarantine? You might be able to reinstate them from there. By the way, it pays to back up your favorites/bookmarks regularly.

Oxie (Lyn)
Oxie (1318)
223337 2004-03-19 21:25:00 I the programs you used, there is a restore facility which you can use .

If using win9x or ME, have a look in c:\windows\favourites and see if they are still listed there . If other windows, post back and will give directions .

Also, if using ME or XP, you may have to turn off the restore function, which could be returning the problem .
Pheonix (280)
223338 2004-03-19 22:08:00 if homepage is still changing
press start button
go to run and type ms config
click on startup tab
look for a command that had rundll32.exe
disable this command
reboot
this should fix your home page problem
phylip (1886)
223339 2004-03-20 00:03:00 trouble with rundll32 is its a generic tool for running any dll as an exe. you may be disabling a good program.

i would "clean boot" (disable startup in msconfig), then run adaware or spybot with the latest updates. if that dosn't help then try hijackthis, tho read the instructions first otherwise you may do damage.

i assume you have tried to change the homepage but it just keeps getting changed back ??
tweak'e (174)
1 2 3 4 5