Computing.Net > Forums > Windows XP > HELP!!! Start Page Hijacked!!!!

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

HELP!!! Start Page Hijacked!!!!

Reply to Message Icon

Name: LJKY
Date: August 25, 2004 at 16:24:30 Pacific
OS: Win XP
CPU/Ram: 526 MB RAM
Comment:

Help!!!!!! My start page got hijacked by http://www.all-websearch.com/! I've tried everything to get rid of it: Ad-Aware, Spybot, CWShredder, HijackThis, but nothing works!!!! Please help me fix my start page!



Sponsored Link
Ads by Google

Response Number 1
Name: Roberto
Date: August 25, 2004 at 16:37:29 Pacific
Reply:

Check this post out:
http://computing.net/windowsxp/wwwboard/forum/113634.html


0

Response Number 2
Name: Alvaro Martin Gomez
Date: August 25, 2004 at 16:42:01 Pacific
Reply:

Hi.

After running all of your anti-spyware programs, run this one. It's excellent for locking your start page.

Hope this helps.


0

Response Number 3
Name: Jude Walker
Date: August 25, 2004 at 18:39:51 Pacific
Reply:

I had these same problems for literally several months and tried every product you named, every product mentioned in this forum and more. Go to http://www.webroot.com/wb/downloads/index.php

and download Spy Sweeper. I haven't had a bit of trouble since I got it.

Good Luck

tenacity, patience, and perseverance because…... I AM THE HUMAN


0

Response Number 4
Name: LJKY
Date: August 26, 2004 at 16:56:06 Pacific
Reply:

Hey, thanks for the replies. But, unfortunately, all-websearch still refuses to leave my start page.

I checked out the post and downloaded swatit, but that didn't do anything. I tried StartPage Guard, but that didn't work either. Spy Sweeper blocks all-websearch from coming back but I have to leave it open otherwise if I shut it down, all-websearch will come back again.

Please, if anyone else could help, please help me fix my start page, I've been working on this for hours.


0

Response Number 5
Name: Roberto
Date: August 26, 2004 at 17:24:44 Pacific
Reply:

Download and run "Hijack This" post the findigs here, then maybe a solution to your problem could be reached.


0

Related Posts

See More



Response Number 6
Name: LJKY
Date: August 26, 2004 at 17:50:49 Pacific
Reply:

Here's what I got from HijackThis:

Logfile of HijackThis v1.98.2
Scan saved at 6:44:01 PM, on 8/26/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\NavNT\DefWatch.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\NavNT\rtvscan.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\inetg\services.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Kazaa Lite K++\KazaaLite.kpp
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = NOT USED (OK)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = NOT USED (OK)
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
F3 - REG:win.ini: run=C:\WINDOWS\inetg\services.exe
O2 - BHO: (no name) - {5321E378-FFAD-4999-8C62-03CA8155F0B3} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [xp_system] C:\WINDOWS\inetg\services.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.exe C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [zSPGuard] c:\program files\pjw\spguard\spguard.exe /s /r
O4 - HKCU\..\Run: [xp_system] C:\WINDOWS\inetg\services.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present



0

Response Number 7
Name: Jude Walker
Date: August 26, 2004 at 20:20:47 Pacific
Reply:

Hello,

You can safely get rid of these, but it's probably not going to do any good:

Explorer\Main,Search Page = NOT USED (OK)
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

When I was having problems with my home page, I finally got to the point where I said, "the worst that could happen is that I'll have to do a clean install of my OS," and I got rid of everything in HijackThis that I couldn't recognize. It never caused me any problems, in fact I even got to the point where I deleted anything that said Explorer. But I would not recommend that for everybody. You definitely want to delete anything that has the word Search in it.

Spysweeper is an excellent program and yes, you must leave it open, but it just sits down there on your taskbar and doesn't bother anything. If you will do these things in this order, you won't have to mess with Ad-Aware, HijackThis, CWShredder or Spybot S&D ever again: (All good programs BTW, but didn't seem to be effective against the self-replicating bugs.)

1. Download Spyware Blaster. Once you have rid your computer of spyware, this program will prevent it from coming back.

2. Turn off System Restore

3. Go to Internet Options and delete cookies, delete files including offline content, and delete history. While you are there, reset your home page, but don't bother to open your browser to see if it is there yet.

4. Reboot in Safe Mode.

5. Run Spysweeper

6. Reboot into Windows

7. Turn System Restore on

There was a period of time for about 2 or 3 months that I thought I would have to live with spyware forever. Now with a combination of the two above mentioned programs, Norton System Works, and my XP firewall, I can surf the deepest nether regions of the Internet and still run a lean, clean machine of a dream.

Good Luck to you.

tenacity, patience, and perseverance because…... I AM THE HUMAN


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows XP Forum Home


Sponsored links

Ads by Google


Results for: HELP!!! Start Page Hijacked!!!!

Hijacked start page www.computing.net/answers/windows-xp/hijacked-start-page/94449.html

my-find start page / favourites www.computing.net/answers/windows-xp/myfind-start-page-favourites/102351.html

Home Page Hijacker (searchx.cc) www.computing.net/answers/windows-xp/home-page-hijacker-searchxcc/101247.html