Solved

My home page keeps changing

Posted on 2004-04-26
4
1,481 Views
Last Modified: 2013-12-04
I have windows XP and everytime I turn on my computer my home page changes to res://mshp.dll/index.html#10213. I have run a system scan for viruses and nothing came up. I tryed to download hijackthis and when it goes to download, it redirects me to this web page http://search-1.net/cgi/search. I purchased a pop up killer hoping t would stop this page from poping up, no luck. I have something in my computer redirecting it and can not figure it out??
0
Comment
Question by:cpietrzyk
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 6

Expert Comment

by:Dale May
ID: 10924006
You need CWShredder from Merijn to get rid of this. It's the only thing that will do it:
http://www.spywareinfo.com/~merijn/cwschronicles.html

d_may
good luck
0
 
LVL 2

Expert Comment

by:LeftofCool
ID: 10924015
Hi,

This is a CoolWebSearch Homepage Hijacker. Download this tool to remove it: http://www.softpedia.com/public/scripts/downloadhero/10-17-150/ . After running this, download Ad-Aware and Spybot Search and Destroy 1.3 RC4, which can be found at these respective links:  http://www.lavasoftusa.com and http://fileforum.betanews.com/detail.php3?fid=1043809773 . RC4 is a release candidate which is an advanced beta test. It should run very smoothly. However, if you do encounter problems with Spybot, download version 1.2 here: http://download.com.com/3000-8022-10194058.html?tag=lst-0-3 . Run all these programs in safe mode as well as in regular mode.
0
 
LVL 49

Expert Comment

by:sunray_2003
ID: 10924029
Use spybot ,ad-ware ,CWshredder and post the log from Hijackthis here

After installing them, First Update them and then run

Spyware/Adware removal tools:
------------------------------

What is spyware : http://www.spychecker.com/spyware.html

SpyBot-S&D : http://www.safer-networking.org/

Ad-aware : http://www.webattack.com/download/dladaware.shtml 

CWShredder: http://www.softpedia.com/public/cat/10/17/10-17-150.shtml

HijackThis : http://www.spychecker.com/program/hijackthis.html 

**************************************

Also take a backup of your registry and then search these registry entries and remove those search1

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
HKCU\Software\Microsoft\Internet Explorer\SearchURL
HKCU\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
HKCU\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
HKCU\Software\Microsoft\Internet Explorer\Search\SearchAssistant
HKCU\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Bar

****************************

Post back
0
 
LVL 49

Accepted Solution

by:
sunray_2003 earned 500 total points
ID: 10924058
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The term "Bad USB" is a buzz word that is usually used when talking about attacks on computer systems that involve USB devices. In this article, I will show what possibilities modern windows systems (win8.x and win10) offer to fight these attacks wi…
Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…

759 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question