Solved

My home page keeps changing

Posted on 2004-04-26
4
1,483 Views
Last Modified: 2013-12-04
I have windows XP and everytime I turn on my computer my home page changes to res://mshp.dll/index.html#10213. I have run a system scan for viruses and nothing came up. I tryed to download hijackthis and when it goes to download, it redirects me to this web page http://search-1.net/cgi/search. I purchased a pop up killer hoping t would stop this page from poping up, no luck. I have something in my computer redirecting it and can not figure it out??
0
Comment
Question by:cpietrzyk
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 6

Expert Comment

by:Dale May
ID: 10924006
You need CWShredder from Merijn to get rid of this. It's the only thing that will do it:
http://www.spywareinfo.com/~merijn/cwschronicles.html

d_may
good luck
0
 
LVL 2

Expert Comment

by:LeftofCool
ID: 10924015
Hi,

This is a CoolWebSearch Homepage Hijacker. Download this tool to remove it: http://www.softpedia.com/public/scripts/downloadhero/10-17-150/ . After running this, download Ad-Aware and Spybot Search and Destroy 1.3 RC4, which can be found at these respective links:  http://www.lavasoftusa.com and http://fileforum.betanews.com/detail.php3?fid=1043809773 . RC4 is a release candidate which is an advanced beta test. It should run very smoothly. However, if you do encounter problems with Spybot, download version 1.2 here: http://download.com.com/3000-8022-10194058.html?tag=lst-0-3 . Run all these programs in safe mode as well as in regular mode.
0
 
LVL 49

Expert Comment

by:sunray_2003
ID: 10924029
Use spybot ,ad-ware ,CWshredder and post the log from Hijackthis here

After installing them, First Update them and then run

Spyware/Adware removal tools:
------------------------------

What is spyware : http://www.spychecker.com/spyware.html

SpyBot-S&D : http://www.safer-networking.org/

Ad-aware : http://www.webattack.com/download/dladaware.shtml 

CWShredder: http://www.softpedia.com/public/cat/10/17/10-17-150.shtml

HijackThis : http://www.spychecker.com/program/hijackthis.html 

**************************************

Also take a backup of your registry and then search these registry entries and remove those search1

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
HKCU\Software\Microsoft\Internet Explorer\SearchURL
HKCU\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
HKCU\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
HKCU\Software\Microsoft\Internet Explorer\Search\SearchAssistant
HKCU\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Bar

****************************

Post back
0
 
LVL 49

Accepted Solution

by:
sunray_2003 earned 500 total points
ID: 10924058
0

Featured Post

Are You Headed to Black Hat USA 2017?

Getting ready for Black Hat next week? Kick things off with the WatchGuard Badge Challenge and test your puzzle and cipher skills. Do you have what it takes to earn our limited edition Firebox Badge? Get started today - https://crimsonthorn.net

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The term "Bad USB" is a buzz word that is usually used when talking about attacks on computer systems that involve USB devices. In this article, I will show what possibilities modern windows systems (win8.x and win10) offer to fight these attacks wi…
No security measures warrant 100% as a "silver bullet". The truth is we also cannot assume anything but a defensive and vigilance posture. Adopt no trust by default and reveal in assumption. Only assume anonymity or invisibility in the reverse. Safe…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
This tutorial will teach you the special effect of super speed similar to the fictional character Wally West aka "The Flash" After Shake : http://www.videocopilot.net/presets/after_shake/ All lightning effects with instructions : http://www.mediaf…
Suggested Courses

628 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question