Solved

My home page keeps changing

Posted on 2004-04-26
4
1,480 Views
Last Modified: 2013-12-04
I have windows XP and everytime I turn on my computer my home page changes to res://mshp.dll/index.html#10213. I have run a system scan for viruses and nothing came up. I tryed to download hijackthis and when it goes to download, it redirects me to this web page http://search-1.net/cgi/search. I purchased a pop up killer hoping t would stop this page from poping up, no luck. I have something in my computer redirecting it and can not figure it out??
0
Comment
Question by:cpietrzyk
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 6

Expert Comment

by:Dale May
ID: 10924006
You need CWShredder from Merijn to get rid of this. It's the only thing that will do it:
http://www.spywareinfo.com/~merijn/cwschronicles.html

d_may
good luck
0
 
LVL 2

Expert Comment

by:LeftofCool
ID: 10924015
Hi,

This is a CoolWebSearch Homepage Hijacker. Download this tool to remove it: http://www.softpedia.com/public/scripts/downloadhero/10-17-150/ . After running this, download Ad-Aware and Spybot Search and Destroy 1.3 RC4, which can be found at these respective links:  http://www.lavasoftusa.com and http://fileforum.betanews.com/detail.php3?fid=1043809773 . RC4 is a release candidate which is an advanced beta test. It should run very smoothly. However, if you do encounter problems with Spybot, download version 1.2 here: http://download.com.com/3000-8022-10194058.html?tag=lst-0-3 . Run all these programs in safe mode as well as in regular mode.
0
 
LVL 49

Expert Comment

by:sunray_2003
ID: 10924029
Use spybot ,ad-ware ,CWshredder and post the log from Hijackthis here

After installing them, First Update them and then run

Spyware/Adware removal tools:
------------------------------

What is spyware : http://www.spychecker.com/spyware.html

SpyBot-S&D : http://www.safer-networking.org/

Ad-aware : http://www.webattack.com/download/dladaware.shtml 

CWShredder: http://www.softpedia.com/public/cat/10/17/10-17-150.shtml

HijackThis : http://www.spychecker.com/program/hijackthis.html 

**************************************

Also take a backup of your registry and then search these registry entries and remove those search1

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
HKCU\Software\Microsoft\Internet Explorer\SearchURL
HKCU\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
HKCU\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
HKCU\Software\Microsoft\Internet Explorer\Search\SearchAssistant
HKCU\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Bar

****************************

Post back
0
 
LVL 49

Accepted Solution

by:
sunray_2003 earned 500 total points
ID: 10924058
0

Featured Post

Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This is a guide to the following problem (not exclusive but here) on Windows: Users need our support and we supporters often use global administrative accounts to do this. Using these accounts safely is a real challenge. Any admin who takes se…
Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question