Solved

My home page keeps changing

Posted on 2004-04-26
4
1,478 Views
Last Modified: 2013-12-04
I have windows XP and everytime I turn on my computer my home page changes to res://mshp.dll/index.html#10213. I have run a system scan for viruses and nothing came up. I tryed to download hijackthis and when it goes to download, it redirects me to this web page http://search-1.net/cgi/search. I purchased a pop up killer hoping t would stop this page from poping up, no luck. I have something in my computer redirecting it and can not figure it out??
0
Comment
Question by:cpietrzyk
  • 2
4 Comments
 
LVL 6

Expert Comment

by:d_may
ID: 10924006
You need CWShredder from Merijn to get rid of this. It's the only thing that will do it:
http://www.spywareinfo.com/~merijn/cwschronicles.html

d_may
good luck
0
 
LVL 2

Expert Comment

by:LeftofCool
ID: 10924015
Hi,

This is a CoolWebSearch Homepage Hijacker. Download this tool to remove it: http://www.softpedia.com/public/scripts/downloadhero/10-17-150/ . After running this, download Ad-Aware and Spybot Search and Destroy 1.3 RC4, which can be found at these respective links:  http://www.lavasoftusa.com and http://fileforum.betanews.com/detail.php3?fid=1043809773 . RC4 is a release candidate which is an advanced beta test. It should run very smoothly. However, if you do encounter problems with Spybot, download version 1.2 here: http://download.com.com/3000-8022-10194058.html?tag=lst-0-3 . Run all these programs in safe mode as well as in regular mode.
0
 
LVL 49

Expert Comment

by:sunray_2003
ID: 10924029
Use spybot ,ad-ware ,CWshredder and post the log from Hijackthis here

After installing them, First Update them and then run

Spyware/Adware removal tools:
------------------------------

What is spyware : http://www.spychecker.com/spyware.html

SpyBot-S&D : http://www.safer-networking.org/

Ad-aware : http://www.webattack.com/download/dladaware.shtml 

CWShredder: http://www.softpedia.com/public/cat/10/17/10-17-150.shtml

HijackThis : http://www.spychecker.com/program/hijackthis.html 

**************************************

Also take a backup of your registry and then search these registry entries and remove those search1

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
HKCU\Software\Microsoft\Internet Explorer\SearchURL
HKCU\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
HKCU\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
HKCU\Software\Microsoft\Internet Explorer\Search\SearchAssistant
HKCU\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Bar

****************************

Post back
0
 
LVL 49

Accepted Solution

by:
sunray_2003 earned 500 total points
ID: 10924058
0

Featured Post

Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question