Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Help!!!!!! My start page got hijacked by http://www.all-websearch.com/! I've tried everything to get rid of it: Ad-Aware, Spybot, CWShredder, HijackThis, but nothing works!!!! Please help me fix my start page!

Hi.
After running all of your anti-spyware programs, run this one. It's excellent for locking your start page.
Hope this helps.

I had these same problems for literally several months and tried every product you named, every product mentioned in this forum and more. Go to http://www.webroot.com/wb/downloads/index.php
and download Spy Sweeper. I haven't had a bit of trouble since I got it.
Good Luck
tenacity, patience, and perseverance becauseā¦... I AM THE HUMAN

Hey, thanks for the replies. But, unfortunately, all-websearch still refuses to leave my start page.
I checked out the post and downloaded swatit, but that didn't do anything. I tried StartPage Guard, but that didn't work either. Spy Sweeper blocks all-websearch from coming back but I have to leave it open otherwise if I shut it down, all-websearch will come back again.
Please, if anyone else could help, please help me fix my start page, I've been working on this for hours.

Download and run "Hijack This" post the findigs here, then maybe a solution to your problem could be reached.

Here's what I got from HijackThis:
Logfile of HijackThis v1.98.2
Scan saved at 6:44:01 PM, on 8/26/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\NavNT\DefWatch.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\NavNT\rtvscan.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\inetg\services.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Kazaa Lite K++\KazaaLite.kpp
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis\HijackThis.exeR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = NOT USED (OK)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = NOT USED (OK)
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
F3 - REG:win.ini: run=C:\WINDOWS\inetg\services.exe
O2 - BHO: (no name) - {5321E378-FFAD-4999-8C62-03CA8155F0B3} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [xp_system] C:\WINDOWS\inetg\services.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.exe C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [zSPGuard] c:\program files\pjw\spguard\spguard.exe /s /r
O4 - HKCU\..\Run: [xp_system] C:\WINDOWS\inetg\services.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

Hello,
You can safely get rid of these, but it's probably not going to do any good:
Explorer\Main,Search Page = NOT USED (OK)
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =When I was having problems with my home page, I finally got to the point where I said, "the worst that could happen is that I'll have to do a clean install of my OS," and I got rid of everything in HijackThis that I couldn't recognize. It never caused me any problems, in fact I even got to the point where I deleted anything that said Explorer. But I would not recommend that for everybody. You definitely want to delete anything that has the word Search in it.
Spysweeper is an excellent program and yes, you must leave it open, but it just sits down there on your taskbar and doesn't bother anything. If you will do these things in this order, you won't have to mess with Ad-Aware, HijackThis, CWShredder or Spybot S&D ever again: (All good programs BTW, but didn't seem to be effective against the self-replicating bugs.)
1. Download Spyware Blaster. Once you have rid your computer of spyware, this program will prevent it from coming back.
2. Turn off System Restore
3. Go to Internet Options and delete cookies, delete files including offline content, and delete history. While you are there, reset your home page, but don't bother to open your browser to see if it is there yet.
4. Reboot in Safe Mode.
5. Run Spysweeper
6. Reboot into Windows
7. Turn System Restore on
There was a period of time for about 2 or 3 months that I thought I would have to live with spyware forever. Now with a combination of the two above mentioned programs, Norton System Works, and my XP firewall, I can surf the deepest nether regions of the Internet and still run a lean, clean machine of a dream.
Good Luck to you.
tenacity, patience, and perseverance becauseā¦... I AM THE HUMAN

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |