Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Cannot set and keep home page in 'internet options' in IE 6.0. The address changes to 'about blank' and another search engine screen displays showing many web sites organized by subject. Usually another 1-2 popup windows open up saying 'your system is infected, or 'try this spybot software' or something similar, and you can bring up a large list of spybot applications. The URL on one screen is: "http://vv3.s13.tempx.cc/qusr.php?aid=31074&index_id=" . If I hit refresh another IE window opens up plus 1-3 popups.
Spybot shows clean, and no viruises. Tried: clean-boot troubleshooting, using the system configuration utility, searching the registry, repairing IE. System is Win 98SE. Browser is IE 6.0.2800.1106. Thanks!

And then you can download win patrol for free to prevent getting your homepage hijacked in future.

It's generally advisable to install, update and run Ad-aware and Spybot Search & Destroy first, as very often those applications will correct the problem.
Computing.Net provides a page of handy links:
Click here for some useful security toolsI'm not insensitive, I just don't care.

I'm sorry to have to ask you to ingore the link Axel gave you in #1.
AlertSpy is rogue anti-spyware which puts false positives on your machine as a goad to purchase. Obviously not to be trusted.
Check any prospective Anti-Spyware program here:
ROGUE ANTI-SPYWARE PROGRAMSIn the meantime stick with jboy's advice at #3.
Derek.W

Thank you all for your responses; unfortunately no change. Ad-aware and Spybot are finding spyware and spybots, I delete them but problem still exists. Would uninstalling and reinstalling IE help? Any other thoughts.
Thanks again,
Don

I doubt messing with IE will help because this is most certainly a malware/spyware issue.
Search Google for a single file free program called CWShredder 2.12 and run it.
If this doesn't help try this freebie trojan & malware finder/fixer (its one I use):
A2FREE - LOOK DOWN PAGE
Get any updates before running it.about:blank is not the easiest thing to get shot of but beware of programs blatantly advertised to deal with it. Often these are full of malware themselves. Always get advice on here or on the Security & Virus forum.
Let us know how you get on.
Derek.W

Gosh, yeah - yet another copycat site.
Sure - if those three basics don't resolve your issues, then you'll need to be more aggressive. You did update the programs, yes??
Spybot, btw, doesn't really scan for virus.
A more serious tool for tracking down and disabling malware is HiJackThis! - but the results require interpretation.
I'm not insensitive, I just don't care.

.... a bit more from me too.
This is a very wicked nasty. Do as I suggested in #7 first and cross your fingers (you never know, we might be lucky).
This is the most difinitive thing I've seen about it if you are forced to wade through it:
CLICK HEREThen, in the ultimate there is always HijackThis as jboy mentioned.
If none of this comes up trumps then you are obviously in for quite a time of it.
Sorry to be so gloomy.
Derek.W

MORE - THIS IS IMPORTANT
Before doing anything else get hold of LSPFIX (see link in #8). It seems that in attempts to fix this problem you might loose your internet connection. LSPFIX gets you back online if this should happen.
Then you can safely resume at my #6 and work down.
Derek.W

Apologies for probably overwhelming you but I've just found this which looks very promising (came from a reliable source):
GENERAL
ABOUT BUSTERI would still get that LSPFIX on hand first though - better safe than sorry.
Derek.W

I had the same problem.The first thing you need to do is stop useing IE6 as it has a large sign on it saying ALL SPYWARE ENTER HERE.You can also download Mozilla Firefox at www.mozilla.com as it does not allow spyware in.I would also install a good firewall.You can go to www.castlecops.com and find everthing you need.

BIGBAD42
With respect this is NOT "the first thing" the poster needs to do. Changing browser will not rid the system of this nasty, which has already taken hold. Certainly not very sensible to leave this nasty on the system.
I would also make two points. When the number of alternative browser users have matched that of IE then the hackers will have the incentive to get started on them. I doubt they will fair so well then.
I have had IE on machines for yonks. The only thing I've ever had was Happy99 (yes that long ago) in the days when opening an attachment was no big deal. Even then IE was not implicated. Sure I've got anti-spyware programs on board but so should everyone.
It is very reasonable to have your own preferences of browser but this must be kept in perspective.
Derek.W

Thank you all again. Additional info: All along have been running ZoneAlarm and using Spybot search & Destroy daily. Right at first tried to do a Windows update to get totally current but ActiveX controls also got damaged and are not configured properly so this does not work. Considering a number of dire cautionary comments here was thinking of biting the bullet, backing up all data, new files, etc. and restoring from a Ghost backup I have that is not totally current. Might this be the best fix?

I think that all depends on your ghost backup arrangements. If it overlays/replaces what you have there now then about:blank will remain in situ. If it clears the HD first then fine it might be a good expedient. Nothing lost trying "About:buster" first I suppose....
Obviously which way you go also depends on how important the recent additions happen to be.
If you should decide to try "About:buster" then there is a tiny bit I need to add (an extra file you need). I'll pop back shortly about that - want to make sure I've got it dead right.
Derek.W

It's a very good idea to run more than one anti spyware application - see this article
ZoneAlarm is a firewall, and really won't prevent malware from taking advantage of legitimate features built into your browser, such as ActiveX controls
You might try IE's repair function to try and correct your damaged controls.
Sure, you can start over, if that's your wish, but if you don't change your setup or surfing habits, odds are nothing will change in the long run.
I do end up recommending FireFox to my friends and family just because it's the simplest 'fix' to prevent further problems, but you would want a clean system regardless.
For now the alternate browsers are considerably safer, but this may change in time
I'm not insensitive, I just don't care.

If you do try About:buster then you will need this file (unless you already have it on board):
MSCOMCTL.OCX INFO & DOWNLOADIt is simple enough to register this file (see "alternatively") which will save you a 5.66M download.
Derek.W

You might wish to see this post, in particular:
Post #1. Problem apparently solved by pasting HijackThis log into auto-HJTlog analyzer on http://hijackthis.de/index.php
Post #3. My previous advice to you, pulled together in a single post.
Post #5. My reservations about whether this fix will last or not.
Derek.W

I have this exact same thing, and am currently looking into how to get rid of this POS. I've had it for a little over a month, and have tried EVERYTHING (seems to me). I've run Ad-Aware, I've run SpyBot S&D, Avast Antivirus, Bazooka Spyware Scanner, Norton Antivirus, McAffee Antivirus, and Hijack This. Each one, can eliminate the problem, until the cpu is restarted or is left on for some time, and it seems the virus re-generates itself and re-loads onto cpu. I've been trying for quite some time to rid the program completely. I've noticed it will re-load if I do any of the following:
1. In IE, navigate to a popular search engine (ie: Yahoo, MSN).
2. Log on AOL Instant Messenger
3. Receive or open an IM window in Yahoo Messenger (however not on startup of Yahoo like for AIM).
I've come very close to just saving my documents, and trashing the HD and installing my new 80GB harddrive, but I refuse to be beaten! Haha! Any other input would be nice, thank you.

Same problems as everybody else with my home page. I ran every spyware and adware program I could. It opens as soon as I log on to my account. Then afterwards it opens to my preset homepage. Then it comes back and opens the next time I log back on to my account. I'm the only user on my computer so I know it's not anybody elses doing. What else can I do.

"What else can I do."
Try posting your own message maybe? That is the preferred method of enquiry - it guarantees your question will receive more attention than it will here - as well, it's important to know your Operating System and (sometimes) machine specs.
These kinds of questions are more appropriate in the Security & Virus forum, here @Computing.Net - this forum is devoted to general problems with Win95 & 98
I'm not insensitive, I just don't care.

![]() |
Dual booting troubleWin 9...
|
Modems Computer or O/S Sp...
|

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |