View Full Version : home page hijack (W98)
08-04-2002, 11:11 PM
Some scumbag marketing site has hijacked my IE home page, no matter how many times I change it everytime I disconnect it resets my home page. Does anybody know how I can send this site to hell?
08-05-2002, 02:09 AM
First download and run Ad-Aware to remove the spyware from your machine. Be sure to get the latest refupdate.
<a target="_blank" href=http://www.lavasoft.de>http://www.lavasoft.de</a>
Other solutions for home page hijacking:
I.E. 5/6 Homepage Rewrite
backup the registry and/or export the following keys:
go to Start>Run, type regedit.
Do a search in the registry for a key named restrictions under the HKEY_CURRENT_USER\Software\Policies\Microsoft\Inte rnet Explorer key and delete it. Then reboot your machine and add the key back and lock your homepage as described below.
Or search for the word policies and check the values for the number 1. The number 1 USUALLY indicates a restriction is in effect. Post back with your findings.
To prevent further problems,
Correct your home page to the one you prefer, then immediately do the following:
Backup the registry and/or export the following keys:
go to Start>Run, type regedit. Navigate to:
HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\In ternet Explorer\
Right-click on the Internet Explorer key, choose new>Key, name it Control Panel. Right-click on the Control Panel, chose new>DWORD value, name it Homepage. Right-click on Homepage, choose modify and type in the number 1.
This should lock your home page, so no other web site can change it.
Then navigate here and verify the homepage is correct:
look for the Start Page entry.
To restore the "default" search settings:
Open Notepad and copy and paste the following between the lines and save the file as searchfix.reg. Double-click on the file to merge the contents into the registry.
If you see a SearchBar entry under [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main], delete it.
<a target="_blank" href=http://www.spywareinfo.com/hijacked.html>http://www.spywareinfo.com/hijacked.html</a>
Carol<P ID="edit"><FONT class="small">Edited by Mocha on 08/04/02 20:13.</FONT></P>
08-05-2002, 12:08 PM
Go to C:\WINDOWS\Downloaded Program Files ... if you see an item that looks like you site from hell...right click it and choose remove...reboot...
08-05-2002, 04:43 PM
Ad-Aware will indeed get rid of a number of Start Page hijackers, although not all of them.
After installing Ad-Aware, be sure also to install the <a target="_blank" href=http://www.jamcomputerservices.com/lavasoft/refupdate.exe>Refupdate Utility</a>.
This utility searches for, downloads and automatically installs the latest AAW reffile (the spyware definitions, so to speak).
Run the refupdate.exe installation file, and once installed, go to Start Menu>Programs, find the Lavasoft Refupdate entry and run it.
Click connect; it will open a connection to the internet to check and update the current signature file.
When that's completed, run Ad-Aware, have your drives and registry scanned for spyware, check all found files and reg keys, hit 'backup', then click continue, and have them all removed.
If no joy, please post your startups:
Go to Start/run, and type Msinfo32, followed by OK.
Go to Software Environment/Startup Programs.
Click Edit/'Select all', and then 'copy'
Now paste the contents in your post.