Yup it comes in through Kazaa - THOSE B---TARDS! OK, here's what I did... (Make sure you read the part about the Police at the bottom of this post) First of all, I uninstalled Kazaa. Screw it, it's not worth this bulls**t aggravation. Then, I downloaded the latest Netscape. Gotta do this before the next steps. It's a pain-in-the-a** with all the re-routing the browser does, but do your best. Then, I open Task Manager (Ctrl+Alt+Del) and kill every instance of iexplore.exe that "pops-up." As I keep doing that, I searched in File Explorer for iexplore.exe on the C: drive. In the results window, I renamed the .exe of the files to my initials so I can find it again. I do this to disable Internet Explorer until I can find a fix. This prevents the f*****n website from loading. If you have an instance of ixeplore.exe running in task manager, it won't let you rename it. Then I loaded Netscape and everything was honky dorey. Of course, I haven't reloaded Kazaa yet. THEN (and here's the REALLY fun part), I did a search at netsol.com's whois to find out who owns default-homepage-network.com, and found the results I've conveniently pasted at the bottom of the page here for you all to peruse. I plan on contacting Kazaa to let them know a vendor they've included in their software installation is distributing distruptive hi-jacking softwares. Let's make a huge stink about this! ALSO: Call the Rochester, NH Police department directly about it. They are aware of it and the more people that call, the better it will be for all of us. Police dispatch in Rochester NH is 603-335-7527, ask for Becky Robertson. She knows ALL about this. I believe the guy's name who's responsible for this crap is Sanford Wallace - a known spam artist. Come on People now! Smile on your brother, come together right now and SQUASH THIS PRICK! Here's their info from netsol.com::: ______________________________________ default-homepage-network.com Registrant: Seismic Entertainment Productions, Inc. (MPPTIHLLQD) 11 Farmington Road Rochester, NH 03867 US Domain Name: DEFAULT-HOMEPAGE-NETWORK.COM Administrative Contact, Technical Contact: Cayer, Mike (35890037P) eaglessuck2000@hotmail.com Seismic Entertainment Productions, Inc. 11 Farmington Road Rochester, NH 03867 US 603-817-0903 Record expires on 16-Sep-2006. Record created on 16-Sep-2003. Database last updated on 4-Dec-2003 09:34:53 EST. Domain servers in listed order: NS1.DEFAULT-HOMEPAGE-NETWORK.COM 205.236.189.50 NS2.DEFAULT-HOMEPAGE-NETWORK.COM 69.36.129.34

0

Pushpaka, What was the response from the NH police? And what all was involved in filing a complaint with them? These a-holes just got me too. Made it through Ad-aware, Pop-up blockers, and a firewall that is set pretty tight.

0

Yeah its REALLY bad. My wife went onto the Eagles site to buy things for an Eagles fan this Christmas. Guess what happened? Yup ole Eaglessuck2000@hotmail.com did a number on my comp. So far I've disabled the web site from loading by running regedit, searching for default-homepage-network.com. Changed the key back to what I had. Took the liberty to go to to mailwiper's ftp site (that is what is loading via IE) and viewed alot of the logs and codes he used to make this. This is not Illegal, it is public with an anonymous log-in. I have copied it all and found really disturbing results, such as his telling the users of the code it will become "more dynamic." And from what it looks like, the code uses exploits in port 1027 to propagate itself thru network entities. This is a worm. I did not ask for it to be on my computer. I did not ask it to change my start page, and I did not ask it to replace words with links to buy stuff on the internet. It has also disabled me from using the buttons to change startup page thru IE settings. Will post when I find out more, and I have also contacted NH police. I am looking to file a civil suit.

0

BEST solution while you are waiting for someone else to give perm fix. Go to internet options> Security> Restricted Sites> enter the url default-homepage-network.com Now at least you won't have any more pop-ups ever!!!! from this site at least!

0

To get rid of the default-homepage-network BS (this is if you use IE): 1. Use CTRL-ALT-DELETE and the task manager to kill all the IE tasks. 2. Go to start, choose "Run.." and type in "Regedit" 3. A window should appear that looks a lot like the file explorer. In the tree view on the left, navigate to : HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main. 4. Once you do this, there should be a bunch of settings listed on the right. Find the one that says "Start page" (you may have to scroll down). Does it have some suspicious network to the right? Good, you found it. 5. Double click on the words "Start page" A little dialog box should come up. Enter "www.yahoo.com" (or whatever) under "Value Data." Hit OK. 6. That's it, you should be OK now. Close the registry editor and try IE again. 7. Call your congressperson, the rochester PD, or whoever you can think of to shut this MF down.

0

** LATEST AD-AWARE WILL FIND THIS ** Got this today. I was searching in google for info on soul calibur 2. Clicked a link (not sure which one), then got an all green page with a button in the middle. I did not click the button and immediately kill all instances of IE. Rebooted. Launched IE and it tried to take me to default-homepage-network.com. I ran ad-aware, it did not find it. I updated to the latest ref file (01R241 25.12.2003), ran ad-aware again and it got it this time. It also finds server224.smartbotpro.net which takes over your search button in IE. Bottom line, the ad-aware with ref file 01R241 25.12.2003 or later should fix it.

0