For several years now my homepage is Yahoo mail (http://mail.yahoo.com/?.intl=us) except for the past three days when my pc opens at a website that I visited three days ago. Many times during the past three days, I have done the following: I change the website to my regular homepage (Yahoo mail) and then I proceed to mouse-click on: Tools Internet Options General Homepage Then I mouse-click on “Use Current” which switches my homepage to the one that I want, unfortunately it only lasts for the current session. When I log-off and reboot, the unwanted homepage appears again. I tried changing both the “Use Current” and “Use Default” but I cannot permanently retain my Yahoo mail homepage. The second problem that I am experiencing (which also surfaced three days ago, is that my Yahoo email gives me error messages whenever I attempt to write a reply to an email or compose a new email. The following is the error message and screens that I get: A run-time error has occurred. Do you wish to debug? Line 226 Error: Wrong number of arguments or invalid property assignment. Do you wish to debug. Yes or No. If I click “Yes”, a new screen appears: “Just-in-time debugging” Please select a debugger: Possible debuggers (only one) New instance of Microsoft Script Editor Do you want to debug using the selected debugger? Yes or No Step into remote procedure call Process: [2168] C:\Program Files\Internet Explorer\IEXPLORE.exe Choose the program types that you want to debug: (only one) Script The following programs will be debugged: Script Microsoft Visual Studio Debugger Microsoft Jscript runtime error: Wrong number of arguments or invalid property assignment. Break or Continue (If I click on “Continue” the same screen re-appears, if I click on “Break”, the following message appears: Do you want to stop debugging? Yes or No Whether I click yes or no, the problem still persists. I also have Microsoft Outlook for my email. Can someone here please help me? Any help would be very much appreciated. Thanks. Bob

Check in your startup list...start> run> msconfig> enter> go to startup tab and uncheck the startup entry for the webpage entry you dont want (if it's there). reboot. then download spybot search and destroy, update it and run scan. That will get rid of the home page hijacker. spybot http://wilders.org/HTMLobj-1590/spybotsd12.exe then go to these links for virus scan. http://www.trojanscan.com/trojanscan/scanner.htm http://www.pandasoftware.es/activescan/ http://housecall.trendmicro.com/housecall/start_corp.asp http://securityresponse.symantec.com/ Hope that helps

That's a homepage high-jack. Visit www.spywareinfo.com Download and install and run AD WARE and SPYBOT to check for and UNINSTALL and delete malware, adware, etc.

Thanks for your advice blender and EC. To update you so far: 1) blender - "Check in your startup list...start> run> msconfig> enter> go to startup tab and uncheck the startup entry for the webpage entry you dont want (if it's there).". Unfortunately the unwanted homepage is not there. "download spybot search and destroy, update it and run scan." Spybot identified lots of spyware (which I deleted with the exception of two which were MS Works, so that was a very worthwhile exercise) but it didn't identify that unwanted homepage or URL. "http://www.trojanscan.com/trojanscan/scanner.htm" - no trojans found. "http://www.pandasoftware.es/activescan/" - it found one infection and disinfected it - but I don't know hwat it was. "http://housecall.trendmicro.com/housecall/start_corp.asp" - no viruses found "http://securityresponse.symantec.com/" - all checked out okay except for my browser, this is the message I received "WARNING! Your Web browser is not configured to protect your browsing history. This means your surfing habits are potentially available to unknown individuals and companies." Then I rebooted but I still unfortunately have the same problem. I loaded "Spy Sweeper" earlier today and now when I reboot I get the message that my homepage was changed to the unwanted homepage and do I want to restore it to Yahoo mail.com, if I click on yes, at least it's restored but that nuisance homepage still haunts me. 2) EC "Download and install and run AD WARE and SPYBOT to check for and UNINSTALL and delete malware, adware, etc." - both software were great at identifying spyware and removing it but unfortunately neither identified the unwanted homepage. But I sure have a squeaky clean pc now (excluding that one nuisance URL)! So thank you very much for your time and advice, much appreciated. Bob

Hi Glad you got some stuff cleaned up Here is another thing to try.. Download "hijack this" run the scan, save the results (it will save to log file where you installed hijack this) cut & paste in reply. Someone here will be able to tell you what to delete. hijack this from here http://www.tomcoyote.org/hjt/ if that dosnt show the problem hijacker then you can download startup list from same site and post results in reply. good luck

Hi again blender & all, The following is the results taken from "hijackthis". Please tell me which ones I should remove. Thanks. Bob Logfile of HijackThis v1.95.0 Scan saved at 3:55:53 PM, on 03/07/2003 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\DSentry.exe C:\Program Files\Common Files\Dell\EUSW\Support.exe C:\PROGRA~1\NORTON~1\navapw32.exe C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe C:\WINDOWS\System32\hphmon03.exe C:\Program Files\Logitech\iTouch\iTouch.exe C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.exe C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe C:\Program Files\ScanSoft\OmniPageSE\opware32.exe C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe C:\Program Files\Washer\washer.exe C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe C:\WINDOWS\System32\ctfmon.exe C:\Program Files\Creative\SBLive\Diagnostics\diagent.exe C:\WINDOWS\system32\cisvc.exe C:\WINDOWS\System32\CTsvcCDA.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\MsPMSPSv.exe C:\WINDOWS\System32\HPHipm09.exe C:\WINDOWS\system32\cidaemon.exe C:\WINDOWS\system32\cidaemon.exe C:\Program Files\Microsoft Office\Office10\OUTLOOK.exe C:\Program Files\Internet Explorer\IEXPLORE.exe C:\Program Files\Internet Explorer\IEXPLORE.exe C:\Program Files\Internet Explorer\IEXPLORE.exe C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe C:\Program Files\Internet Explorer\IEXPLORE.exe C:\Program Files\Internet Explorer\IEXPLORE.exe C:\PROGRA~1\WINZIP\winzip32.exe C:\WINDOWS\explorer.exe C:\unzipped\hijackthis[1]\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL=http://%77%77%77%2e%63%6f%6f%6c%77%77%77%73%65%61%72%63%68%2e%63%6f%6d/%7a/%62/%78%31%2e%63%67%69?%39%34%37%35%33%39 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar=http://%77%77%77%2e%63%6f%6f%6c%77%77%77%73%65%61%72%63%68%2e%63%6f%6d/%7a/%63/%78%31%2e%63%67%69?%39%34%37%35%33%39 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page=http://%77%77%77%2e%63%6f%6f%6c%77%77%77%73%65%61%72%63%68%2e%63%6f%6d/%7a/%62/%78%31%2e%63%67%69?%39%34%37%35%33%39 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://mail.yahoo.com/?.intl=us R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL=http://%77%77%77%2e%63%6f%6f%6c%77%77%77%73%65%61%72%63%68%2e%63%6f%6d/%7a/%61/%78%31%2e%63%67%69?%39%34%37%35%33%39 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL=http://%77%77%77%2e%63%6f%6f%6c%77%77%77%73%65%61%72%63%68%2e%63%6f%6d/%7a/%62/%78%31%2e%63%67%69?%39%34%37%35%33%39 R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant=http://%77%77%77%2e%63%6f%6f%6c%77%77%77%73%65%61%72%63%68%2e%63%6f%6d/%7a/%62/%78%31%2e%63%67%69?%39%34%37%35%33%39 R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch=http://%77%77%77%2e%63%6f%6f%6c%77%77%77%73%65%61%72%63%68%2e%63%6f%6d/%7a/%62/%78%31%2e%63%67%69?%39%34%37%35%33%39 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page=http://mail.yahoo.com/?.intl=us R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page=http://%77%77%77%2e%63%6f%6f%6c%77%77%77%73%65%61%72%63%68%2e%63%6f%6d/%7a/%62/%78%31%2e%63%67%69?%39%34%37%35%33%39 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL=http://%77%77%77%2e%63%6f%6f%6c%77%77%77%73%65%61%72%63%68%2e%63%6f%6d/%7a/%62/%78%31%2e%63%67%69?%39%34%37%35%33%39 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch=http://%77%77%77%2e%63%6f%6f%6c%77%77%77%73%65%61%72%63%68%2e%63%6f%6d/%7a/%62/%78%31%2e%63%67%69?%39%34%37%35%33%39 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant=http://%77%77%77%2e%63%6f%6f%6c%77%77%77%73%65%61%72%63%68%2e%63%6f%6d/%7a/%62/%78%31%2e%63%67%69?%39%34%37%35%33%39 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\System32\blank.htm O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx (file missing) O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.exe C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe O4 - HKLM\..\Run: [HPHmon03] C:\WINDOWS\System32\hphmon03.exe O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.exe O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.exe O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [diagent] "C:\Program Files\Creative\SBLive\Diagnostics\diagent.exe" startup O4 - HKLM\..\Run: [sysPnP] C:\WINDOWS\System32\bootconf.exe O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe O4 - HKCU\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe /0 O4 - HKCU\..\Run: [Washer] C:\Program Files\Washer\washer.exe /0 O4 - Startup: Reminder-hpc40415.lnk = C:\Program Files\hp photosmart\C200 Camera\Registration\Remind32.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.exe O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ? O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Search Using Copernic Agent - C:\Program Files\Copernic Agent\Web\SearchExt.htm O9 - Extra 'Tools' menuitem: Launch Copernic Agent (HKLM) O9 - Extra button: Copernic Agent (HKLM) O9 - Extra button: MoneySide (HKLM) O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Messenger (HKLM) O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: {0335A685-ED24-4F7B-A08E-3BD15D84E668} - http://dl.filekicker.com/send/file/128985-NZIL/PhPSetup.cab O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (sys Class) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab O16 - DPF: {597C45C2-2D39-11D5-8D53-0050048383FE} (OPUCatalog Class) - http://office.microsoft.com/productupdates/content/opuc.cab O16 - DPF: {69DEAF94-AF66-11D3-BEC0-00105AA9B6AE} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2003063001/housecall.antivirus.com/housecall/xscan53.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.es/activescan/as/asinst.cab O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37739.9018171296 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O16 - DPF: {DF6A0F17-0B1E-11D4-829D-00C04F6843FE} (Microsoft Office Tools on the Web Control) - http://officeupdate.microsoft.com/TemplateGallery/downloads/outc.cab O19 - User stylesheet: C:\WINDOWS\default.css

These are *crap*, all pointing to "http://www.youfindall.net/", Unless you entered that yourself. Back up settings first before you change your registry manual ('export') you never know. 1.Default is empty, one empty "Provider" REG_SZ. R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL=http://%77%77%77%2e%63%6f%6f%6c%77%77%77%73%65%61%72%63%68%2e%63%6f%6d/%7a/%62/%78% 2.Default "Search Page": http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page=http://%77%77%77%2e%63%6f%6f%6c%77%77%77%73%65%61%72%63%68%2e%63%6f%6d/%7a/%62/%78%31%2e%63%67%69?%39%34%37%35%33%39 3. I can't find this key "Default_Page_URL" in my registry while having a "home page") So delete R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar=http://%77%77%77%2e%63%6f%6f%6c%77%77%77%73%65%61%72%63%68%2e%63%6f%6d/%7a/%63/%78%31%2e%63%67%69?%39%34%37%35%33%39 4. Same as above. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL=http://%77%77%77%2e%63%6f%6f%6c%77%77%77%73%65%61%72%63%68%2e%63%6f%6d/%7a/%61/%78%31%2e%63%67%69?%39%34%37%35%33%39 6. Same as above. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL=http://%77%77%77%2e%63%6f%6f%6c%77%77%77%73%65%61%72%63%68%2e%63%6f%6d/%7a/%62/%78%31%2e%63%67%69?%39%34%37%35%33%39 7. Same as above, the Search folder seems an override. (I only can Find a SearchURL folder with an empty REG_SZ "Provider" key.) R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant=http://%77%77%77%2e%63%6f%6f%6c%77%77%77%73%65%61%72%63%68%2e%63%6f%6d/%7a/%62/%78%31%2e%63%67%69?%39%34%37%35%33%39 R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch=http://%77%77%77%2e%63%6f%6f%6c%77%77%77%73%65%61%72%63%68%2e%63%6f%6d/%7a/%62/%78%31%2e%63%67%69?%39%34%37%35%33%39 8. default "Search Page": http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch (google is cooler you know?) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page=http://%77%77%77%2e%63%6f%6f%6c%77%77%77%73%65%61%72%63%68%2e%63%6f%6d/%7a/%62/%78%31%2e%63%67%69?%39%34%37%35%33%39 9. Default "Default_Search_URL": http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL=http://%77%77%77%2e%63%6f%6f%6c%77%77%77%73%65%61%72%63%68%2e%63%6f%6d/%7a/%62/%78%31%2e%63%67%69?%39%34%37%35%33%39 10. Default "CostumizeSearch": http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch=http://%77%77%77%2e%63%6f%6f%6c%77%77%77%73%65%61%72%63%68%2e%63%6f%6d/%7a/%62/%78%31%2e%63%67%69?%39%34%37%35%33%39 11. Default "SearchAssistant": "http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm" R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant=http://%77%77%77%2e%63%6f%6f%6c%77%77%77%73%65%61%72%63%68%2e%63%6f%6d/%7a/%62/%78%31%2e%63%67%69?%39%34%37%35%33%39 Unckeck some stuff at startup, like a scanner deamon or cdr program. When you open up your scannerproggy it will launch it as well. Only really *needed* programs as system files and system helpers(like your soundblaster and nvidia driverhelpers), antivirus and firewalls should be started up at boottime. (this is just a tip ;) Will save you time at bootup) Have fun.