Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
My homepage was highjacked and it leads me to a website ''I Can Find It Search For Pleasure''. And the address reads: C:\WINNT\system32\IEsp.mht
I've tried everything. Nothing seems to work. Please...someone help me.

I posted this fix a few posts below..
1. Shutdown Internet-Explorer, go to your Taskmanager and kill all processes named IEXPLORE.exe
2. Delete this Files:
C:\WINDOWS\system32\IEsp.mht
C:\WINDOWS\system32\msadocm32.dll
C:\WINDOWS\system32\sqlpool.dll3. Change the Following Registry-Key to "about:blank" (without quotes)
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page4. Run regedit.exe and delete the following Registry Keys,or Run Hijackthis and Scan and fix ONLY these entries if they exist:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0B519E07-7824-4adc-8890-93D5EABBF285}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0B519E07-7824-4adc-8890-93D5EABBF285}\VersionIndependentProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0B519E07-7824-4adc-8890-93D5EABBF285}\ProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0B519E07-7824-4adc-8890-93D5EABBF285}\Programmable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0B519E07-7824-4adc-8890-93D5EABBF285}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0B519E07-7824-4adc-8890-93D5EABBF285}
or execute
reg.exe delete HKLM\SOFTWARE\Classes\CLSID\{0B519E07-7824-4adc-8890-93D5EABBF285}5. Delete the Value {0B519E07-7824-4adc-8890-93D5EABBF285} from HKEY_CLASSES_ROOT\ADODB.Comand\CLSID\
I recommend using an alternative web browser such as Mozilla firefox.There are more security issues with IE then with MFF.

Glad to help.I highly recommend using Mozilla firefox,it will give you alot less headaches.Here is the link if you are interested....

Okay it seems I still have a problem. My homepage is normal now. But everytime I turn on my computer, and when I log onto the internet a ''sex'' icon is created on my desktop. And it doesn't even log me in, it gives me a ''connection error''. It does allow me to get on the internet on the second attempt though.

For the pest to be completly removed, all the files that i listed have to be removed from your system.You can go back and make sure that all the files were removed from your system,that includes your recycle bin,cookies,old files,etc.If all these files were indeed removed?It possible that you have other infections in your system....
First-Run spybot,and Ad-aware in safe mode by tapping the F8 key upon startup,and select SAFE MODE in the menu.Also run your Antivirus in safe mode while your in safe mode to eliminate any possible viruses.After you have completed this,reboot your system in normal mode,and see if you still have the problems.If you still have the icon on your desktop?post back with a hijackthis log and i will take a look at it for you,but make sure you have completed this advice first before posting your log.
Here is a link for hijackthis.Copy and paste your log back into the forum after you have completed the advice.

![]() |
Hijacked homepage, can't ...
|
are adaware and spybot sp...
|

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |