Computing.Net > Forums > Windows Me > Browser hijacked -

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Browser hijacked -

Reply to Message Icon

Name: sergusha78
Date: July 6, 2004 at 08:22:19 Pacific
OS: Millennium Edition Micros
CPU/Ram: 1 GHZ and 128 MB Ram
Comment:

My homepage keeps changing to "about:blank" after every time I open new browser and some unknown "search for..." page hijacked my web browser. Every tine I ran AD-AWARE program, I come across "Possible Browser Hijack attempt/RegData/Data Miner/HKEY_CURRENT_USER:Software\Microsoft\Internet Explorer\Main "Star Page" ("about:blank")".Every time I restart my PC and open new browser, "about:blank" and "search for..." reappear after numerous attempts to delete with AD-AWARE and over Spy-Ware programmes. Please, help reset my web browser to previous homepage setting.
Every time I change homepage it switches back to "search for..." page and default homepages setting switches to "search for..." web browser.



Sponsored Link
Ads by Google

Response Number 1
Name: daz1000
Date: July 6, 2004 at 08:30:57 Pacific
Reply:

PLEASE HELP!

My Browser also changes to about:blank in 98

I've tried everything!!!!!!!!!No ad-ware, shedder, nothing works to rid it, nobody seems to know how to rid it!

Please help if you can!


0

Response Number 2
Name: daz1000
Date: July 6, 2004 at 12:40:57 Pacific
Reply:

Hi all,

I've just found a way of stopping your IE homepage in windows 98 from changing to about:BLANK and having those annoying spyware detected ads!

I found this on another site, the guys a hero! It was easy for me, no bull, and worked for me!

Try this.


1. Go to 'view', 'folder options', 'view', 'SHOW ALL FILES' in windows explorer.

2. Run adaware, making sure to scan the windows, program files, my documents folders. Then run Shredder. I don't know much, but removed anything which didnt look right. (if you don't have adaware or cwshedder then just find them on the web, they are free, not difficult to find or download)

3.unplug your internet....I just pulled out lead at the back.

4.Now go to 'start' in the bottom left, and 'run', then type in msinfo32

5.Expand the Software enviroment section, and select System Hooks.

6.If you are infected with CWSearchx, you will see a suspicious file there. Hook type 'windows procedure' The file name will be a nonsense string of characters, ending in .dll The path will be \windows\System. WRITE IT DOWN! (mine was ctlm.dll)

7.Close that. Open windows explorer, go to \windows\system and look for the file. If you can see it, then it's WRONG. Hopefully it won't be there......mine wasn't there!...which is good.

8.Shut down, hold down F8 on the keyboard to get the safemode option screen thingy when it restarts. Now unless I do this, which I can't at mo, as I'm typing, I can't remember exact wording, but choose the option where it lets you type in,the command prompt. (about 4th line down is it)

Anyway, when you get the C:\ command line, type cd\windows\system

9. Then type dir, a space, and the name of the file you wrote down.

e.g dir ctlm.dll

The file should show and be 57,344 bytes, mine was and the guy who did this first says his was

10. Type ren, a space, and the name of the file, and then a new name for the file(e.g ren ctlm.dll ctlm.bob). Make sure you change the extension of the file from .dll to something else. Don't delete it. I named it .bob also.

11. Restart in safe mode...hold down F8 and then choose safe mode.It moaned that it couldn't find the file....which is good!

12. Once in Safemode I ran all my programs again..adaware, CWshedder, mine didn't find anything, but it could find the renamed file in your system folder and will identify it as CWS, if it does, have adaware delete it.

Mine didn't though.

13. Restart the computer normally....mine was fixed!!!!!!!!!!!!!

Oh yes, plug your internet back in.

If you wanna thank this guy, then the original link is here....

http://forums.spywareinfo.com/index...topic=10746&hl=


I'd like to know if this works for everyone?!


0

Response Number 3
Name: mike822
Date: August 26, 2004 at 01:15:37 Pacific
Reply:

if none of that will work...
and even if it will...this is much easier:

this is the website of the search page that comes up:

http://oz.msie.tv

go there and click the link to uninstall and run it, then it goes away for GOOD.


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows Me Forum Home


Sponsored links

Ads by Google


Results for: Browser hijacked -

Browser Hijacking....... www.computing.net/answers/windows-me/browser-hijacking/25561.html

new browser hijack? www.computing.net/answers/windows-me/new-browser-hijack/40497.html

was my browser hijacked? www.computing.net/answers/windows-me/was-my-browser-hijacked/43100.html