Hi. I have a question regarding a possible browser hijack attempt on my computer. After running AdAware, i remove two infected registry keys. Here is the info: Possible browser hijack attempt : Software\Microsoft\Internet Explorer\MainStart Pageabout:blank Possible Browser Hijack attempt Object recognized! Type : RegData Data : "about:blank" Rootkey : HKEY_CURRENT_USER Object : Software\Microsoft\Internet Explorer\Main Value : Start Page Data : "about:blank" Possible browser hijack attempt : .Default\Software\Microsoft\Internet Explorer\MainStart Pageabout:blank Possible Browser Hijack attempt Object recognized! Type : RegData Data : "about:blank" Rootkey : HKEY_USERS Object : .Default\Software\Microsoft\Internet Explorer\Main Value : Start Page Data : "about:blank" Not a problem. I quarantine and delete it. Then, when i open up my internet explorer, my homepage is now www.msn.com. So i run the adaware again, same deal. It finds the same registry keys, i quarantine/delete them, and again, my homepage is redirected to MSN.com Im only redirected to msn once i delete these registry keys. Plus, they keep coming back time and time again. My nortons says no virus found, i update twice a week. What is causing this and how can i rid myself of this problem for good? P.S. Can this be caused by my pop up killer? Its called NoAds 2002.11.05. I dont know, just a theory. Maybe coincidence. Any help is appreciated please. Thanks in advance. i have dual boot win98 and win XP, my problem is how to edit the MBR, because my Win XP does not boot properly (it boots again and again without getting in to the proper OS of Win XP). What will I do?

http://www.lavahelp.com/articles/v6/04/05/1801.html Answer found at http://www.lavahelp.com/

From SpyDie: Remove that entry and your Start-page for IE will be reset to msn.com. Now, reset it again to About:Blank. Re-run a new scan with Ad-aware and place that object on the ignore list (right-click on the item in the 'results' window and select 'Add selection to Ignorelist')

thanks! that helped Mr. Mister

hy i have the exact same problem;( but now i did what you said and still have the same problem;( and adware now just ignores those (8) files ! ;( what should i do?????

should i quarantine em first before i ignore em?

these are the ones that keep comming back;( Possible Browser Hijack attempt RegData Data Miner HKEY_CURRENT_USER:Software\Microsoft\Internet Explorer\Main\"about:blank" (Ignored) Possible Browser Hijack attempt RegData Data Miner HKEY_LOCAL_MACHINE:Software\Microsoft\Internet Explorer\Main\"about:blank" (Ignored) Possible Browser Hijack attempt RegData Data Miner HKEY_CURRENT_USER:Software\Microsoft\Internet Explorer\Main\"file://C:\DOCUME~1\IRONHE~1\LOCALS~1\Temp\sp.html" (Ignored) Possible Browser Hijack attempt RegData Data Miner HKEY_CURRENT_USER:Software\Microsoft\Internet Explorer\Main\"file://C:\DOCUME~1\IRONHE~1\LOCALS~1\Temp\sp.html" (Ignored) Possible Browser Hijack attempt RegData Data Miner HKEY_CURRENT_USER:Software\Microsoft\Internet Explorer\Search\"file://C:\DOCUME~1\IRONHE~1\LOCALS~1\Temp\sp.html" (Ignored) Possible Browser Hijack attempt RegData Data Miner HKEY_LOCAL_MACHINE:Software\Microsoft\Internet Explorer\Main\"file://C:\DOCUME~1\IRONHE~1\LOCALS~1\Temp\sp.html" (Ignored) Possible Browser Hijack attempt RegData Data Miner HKEY_LOCAL_MACHINE:Software\Microsoft\Internet Explorer\Main\"file://C:\DOCUME~1\IRONHE~1\LOCALS~1\Temp\sp.html" (Ignored) Possible Browser Hijack attempt RegData Data Miner HKEY_LOCAL_MACHINE:Software\Microsoft\Internet Explorer\Search\"file://C:\DOCUME~1\IRONHE~1\LOCALS~1\Temp\sp.html"