Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1490
  • Last Modified:

My home page keeps changing

I have windows XP and everytime I turn on my computer my home page changes to res://mshp.dll/index.html#10213. I have run a system scan for viruses and nothing came up. I tryed to download hijackthis and when it goes to download, it redirects me to this web page http://search-1.net/cgi/search. I purchased a pop up killer hoping t would stop this page from poping up, no luck. I have something in my computer redirecting it and can not figure it out??
0
cpietrzyk
Asked:
cpietrzyk
  • 2
1 Solution
 
Dale MaySecurityCommented:
You need CWShredder from Merijn to get rid of this. It's the only thing that will do it:
http://www.spywareinfo.com/~merijn/cwschronicles.html

d_may
good luck
0
 
LeftofCoolCommented:
Hi,

This is a CoolWebSearch Homepage Hijacker. Download this tool to remove it: http://www.softpedia.com/public/scripts/downloadhero/10-17-150/ . After running this, download Ad-Aware and Spybot Search and Destroy 1.3 RC4, which can be found at these respective links:  http://www.lavasoftusa.com and http://fileforum.betanews.com/detail.php3?fid=1043809773 . RC4 is a release candidate which is an advanced beta test. It should run very smoothly. However, if you do encounter problems with Spybot, download version 1.2 here: http://download.com.com/3000-8022-10194058.html?tag=lst-0-3 . Run all these programs in safe mode as well as in regular mode.
0
 
sunray_2003Commented:
Use spybot ,ad-ware ,CWshredder and post the log from Hijackthis here

After installing them, First Update them and then run

Spyware/Adware removal tools:
------------------------------

What is spyware : http://www.spychecker.com/spyware.html

SpyBot-S&D : http://www.safer-networking.org/

Ad-aware : http://www.webattack.com/download/dladaware.shtml 

CWShredder: http://www.softpedia.com/public/cat/10/17/10-17-150.shtml

HijackThis : http://www.spychecker.com/program/hijackthis.html 

**************************************

Also take a backup of your registry and then search these registry entries and remove those search1

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
HKCU\Software\Microsoft\Internet Explorer\SearchURL
HKCU\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
HKCU\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
HKCU\Software\Microsoft\Internet Explorer\Search\SearchAssistant
HKCU\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Bar

****************************

Post back
0
 
sunray_2003Commented:
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Improved Protection from Phishing Attacks

WatchGuard DNSWatch reduces malware infections by detecting and blocking malicious DNS requests, improving your ability to protect employees from phishing attacks. Learn more about our newest service included in Total Security Suite today!

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now