Forum Home
Press F1
 
Thread ID: 42900 2004-02-26 05:35:00 find4u hijack wozz (5315) Press F1
Post ID Timestamp Content User
218309 2004-02-26 05:35:00 Help!!
My browser's (IE6 SP1) homepage has been hijacked by a web site called Find4u.net

How can I remove this and get back my own home page? I seems that anything I do in IE tools just doesn't work

Thanks in anticipation

Woz
wozz (5315)
218310 2004-02-26 06:13:00 You need to download, install and run Spybot Search & Destroy (www.safer-networking.org) and/or Ad-aware 6 (free version) (www.lavasoftusa.com). Make sure you keep them updated via the inbuild update function. Jen C (20)
218311 2004-02-26 06:39:00 This one is a bit too tough for Adaware and Spybot. Go here (www.spywareinfo.com) and download HijackThis (under the Official Downloads section), run it and put a tick next to the following lines if they are listed, "fix checked" and restart your system:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = find4u.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = find4u.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = find4u.net
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = find4u.net
O4 - HKCU\..\Run: [olehelp] C:\WINNT\System32\olehelp.exe
O4 - Global Startup: winlogon.exe
O16 - DPF: {9DBAFCCF-592F-FFFF-FFFF-00608CEC297B} - web.net2phone.com

Only tick these items, nothing else or your computer may stop working.


Reboot then download CWShredder (www.sherrylynn.us), run the program and let it do its thing. Make sure to click on "Fix" and not scan only.

Start your computer in safe mode, navigate to C:\Documents and Settings\All Users\Start Menu\Programs\Startup, and delete winlogon.exe
Find and delete this also: olehelp.exe

If you wish you can post your Startup log from HijackThis after cleaning to see what else might need deleting.
Susan B (19)
1