Over 1 million tech questions and answers.

Reoccurring unwanted browser start page (once a month?)

Q: Reoccurring unwanted browser start page (once a month?)

===============================================

Sysinfo:
Tech Support Guy System Info Utility version 1.0.0.4
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz, Intel64 Family 6 Model 37 Stepping 2
Processor Count: 4
RAM: 6006 Mb
Graphics Card: NVIDIA GeForce 310M, 512 Mb
Hard Drives: C: 232 GB (35 GB Free); D: 221 GB (31 GB Free);
Motherboard: Acer, Aspire 4740
Antivirus: Microsoft Security Essentials, Enabled and Updated

===============================================
Once every month or so, my browser(s) (Chrome and IE) would open up an ad-filled page called "th.hao123.com". The default start page for both of them are set to "new tabs page" on launch.

I searched for "hao" in the registry and found suspicious entries in the following folders: "HKEY_CURRENT_USER\Software\Microsoft\Interent Explorer\EUPP Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy\DHP" under the "DoNotAskAgain" key's value as saying: "th.hao123.com". And also in the folder: "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN" under the "Start Page" key's value as saying: "http://th.hao123.com/?tn=sdks_inner_hp_09_hao123_th&guid=bfc7f3cf757f1eea017a41a569e2d927". And once again, in the folder: "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN" under the "Start Page" key's value as saying: "http://th.hao123.com/?tn=sdks_inner_hp_09_hao123_th&guid=bfc7f3cf757f1eea017a41a569e2d927". Once more under the folder: "HKEY_USERS\S-1-...***and then a bunch of numbers - too lazy to type them...***\Software\Microsoft\Internet Explorer\EUPP Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy\DHP" under the "DoNotAskAgain" key's value as saying: "th.hao123.com".

Thus, I suspect it to be the work of a malware or unwanted program. Any advice is much appreciated. Thank you in advance!

Read other answers
RELEVANCY SCORE 200
Preferred Solution: Reoccurring unwanted browser start page (once a month?)

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

RELEVANCY SCORE 64.4

When IE6 starts the webpage http://www.safyway.blogspot.com opens. This is not my default page or home page and I have no idea how this has become the default page. When attempts to change this default page are made, it returns back to www.safyway.blogspot.com It appears the hijacker has taken control over the default start page of IE. I wish to get back control to the earlier normal settings. Please assist. Also when the fix it option is clicked in Hijackthis for the 2 lines R0 and R1 there is no effect on this setting.

Here is my HJT log file.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:07:36 PM, on 25/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\wscript.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\eManager\anbmServ.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Comodo... Read more

Read other answers
RELEVANCY SCORE 63.6

A week ago I fitted an extra internal hard drive to handle a video program and subsequent large files. I followed instrutions from one of you fellows out there who know what they are doing. Everything is fine with the drive and program. The problem is I get a page when the desk top has finished loading that just shows the new drive. How do I get into the XP SP2 program to remove it. Thanks, great site!
 

A:Unwanted page at start up, how do I remove it.

Could you post a capture of this page?

Give a little bit more information on the page if possible?
 

Read other 3 answers
RELEVANCY SCORE 60

I have a web page that keeps reoccuring and I have reset and gotten rid of the cookies and even have went into the registry. I have followed the post "Internet Home Page" and "Certain website won't stop making itself the home page." Does anyone have any other ideas?

Thank you
 

A:[Resolved] Reoccurring home page

Read other 16 answers
RELEVANCY SCORE 59.6

Hi;

One of my kids turned off PC's security during a download and forgot to restart when they finished. I know of at least two issues.... "ABOUT BLANK" (loss of start page) and "MY SEARCH ASSITANT" in programs add/remove. PC is now fully secured and I am now looking for any remaining "rats in the woodpile"! Would appreciate a read of the HJT scan below-

Many thanks in advance
Webz
Logfile of HijackThis v1.99.1
Scan saved at 9:12:09 AM, on 9/14/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\Program Files\Dell Photo AIO Printer 922\dlbtbmgr.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\CA\eTrust Internet Security Suite\caissdt.exe
C:\Program Files\Dell Photo AIO Printer 922\dlbtbmon.exe
C:\Program Files\C... Read more

A:Solved: HJT Scan read please....loss of start page & unwanted search assist present

Please click here http://www.majorgeeks.com/Sun_Java_Runtime_Environment_d4648.html to download the latest version of JAVA Install the application, then go to the Add/Remove Programs options in the Control Panel and Remove ALL previous versions of JAVA.

log looks fine
Get all of these and/or verify you have the current versions

SpywareBlaster 3.5.1 http://majorgeeks.com/download2859.html
SpyBot V1.4 http://www.majorgeeks.com/download2471.html
AdAware SE 1.06 http://www.majorgeeks.com/download506.html
MS Windows Defender - http://www.microsoft.com/downloads/...E7-DA2B-4A6A-AFA4-F7F14E605A0D&displaylang=en (XP and W2K only)

DownLoad them (they are free), install them, check each for their
definition updates and then run AdAware, MS Defender (W2k/XP) and Spybot, fixing anything they say.

In SpywareBlaster - Always enable all protection after updates
In SpyBot - After an update run immunize

Check for updates and run weekly
 

Read other 2 answers
RELEVANCY SCORE 58

Hi all,

I noticed a couple days ago that clickker.cn was hijacking my google queries, so I formatted my system partition and started fresh. (Formatting seemed less of a hassle than the HJT/combofix solutions I saw here.)

Unfortunately, it appears that the malware stuck around despite the format, or else was unleashed again within the first few apps I reinstalled after the format. I suspect it may be the latter.

I'm hoping that you guys might be able to answer a couple general questions:

1. Will this clickker.cn malware stick around despite formatting, or is it probably the case that I foolishly reinstalled it myself? Could it have attached itself to executables on other partitions?

2. Does this malware have a keylogger component? Should I be worried about the fidelity of any logins/passwords I used on the infected machine? (e.g. gmail accounts, online banking, etc.)

(specs: WinXP pro, service pack 3)

Thanks in advice for your help and expert advice!

A:Reoccurring clickker.cn browser hijacking

Will this clickker.cn malware stick around despite formatting, or is it probably the case that I foolishly reinstalled it myself? Could it have attached itself to executables on other partitions?YesDid you try backing up documents and such to an external hard drive? That would be infected alsoDoes this malware have a keylogger component? Should I be worried about the fidelity of any logins/passwords I used on the infected machine? (e.g. gmail accounts, online banking, etc.)It's possibleThe new viruses are morphing every day

Read other 1 answers
RELEVANCY SCORE 58

Hi all,

I noticed a couple days ago that clickker.cn was hijacking my google queries, so I formatted my system partition and started fresh. (Formatting seemed less of a hassle than the scanning/disinfecting/combofix solutions I saw here.)

Unfortunately, it appears that the malware stuck around despite the format, or else was unleashed again within the first few apps I reinstalled after the format. I suspect it may be the latter.

I'm hoping that you guys might be able to answer a couple general questions:

1. Will this clickker.cn malware stick around despite formatting, or is it probably the case that I foolishly reinstalled it myself? Could it have attached itself to executables on other partitions?

2. Does this malware have a keylogger component? Should I be worried about the fidelity of any logins/passwords I used on the infected machine? (e.g. gmail accounts, online banking, etc.)

EDIT: WinXP pro, service pack 3.

Thanks in advice for your help and expert advice!
 

A:Reoccurring clickker.cn browser hijacking

Hello andypants,

is it probably the case that I foolishly reinstalled it myself?Click to expand...

If you carried out a reformat (and sometimes people do a re-install thinking they have carried out a reformat) then you would have reintroduced the virus yourself.

If you want me to look at it for you do this:

You may have used Malwarebytes before. If you have, and still have it on your machine, please update and run. Post the scan report back here.

If you do not have Malwarebytes please download from Here

Double Click mbam-setup.exe to install the application.
Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select "Perform Quick Scan", then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Copy&Paste the entire report in your next reply.
Extra Note:
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection ... Read more

Read other 3 answers
RELEVANCY SCORE 56.4

Is it a way on internet explorer, Maxthon browser and Firefox to put a command next to 'iexplore.exe'
inside a shortcut that will start a specific web page during startup of the browser? This way the start page
won't go away from a new installed application.

A:Start page of browser

Hello Marios,

Yes, you could use the method in OPTION THREE of the tutorial below to create a website (URL) shortcut that will open directly to the website you specify in the web browser you want.

Internet Website Shortcut - Create

Read other 1 answers
RELEVANCY SCORE 56

I use Windows 98 (just to let u know).
My Internet Explorer (IE6) start page (previously www.yahoo.com) has been replaced by 'http://213.159.117.134/index.php'. I've tried changing my home page option in IE's properties back to www.yahoo.com, but the 'intruder site' keeps reseting the address field and coming back again...

I'll attempt to descibe what happens exactly once I'm connected to the net...
Once I've connected to the internet, opening IE takes me to 'http://213.159.117.134/index.php' , 'www.Cool Web Search.com', ’about:blank’, a few ads about fixing spyware on my pc and another window named 'tpx/open/console_out.php' or something like that...one after the other in succession...(then again, I’m not sure I got the order right…that isn’t important anyway…)

Once I get the 'tpx/open/console_out.php' window I find it necessary to close it immediately 'cuz if I let it load, it disconnects me from the internet , and my second attempt to connect back proves futile as I get a message saying 'The modem is being used by another Dial-up connection. Close the other connection and try again. ' (so I've learnt by experience...sigh...)

I don’t know if this message I encounter is related in any way to a Dail-up Connection dialog box which keeps popping up on my screen almost without reason randomly at any time, right from the moment I switch on my pc. This Dail-up Connec... Read more

A:IE browser start page hijacked

Hi and welcome to TSG,

First click: http://www.majorgeeks.com/download4086.html to download CWShredder, but don't run it yet.

Next click: http://securityresponse.symantec.com/avcenter/FxAgentB.exe to download the Backdoor.Agent.B Removal Tool from Symantec. Save the file to a convenient location, such as your Windows desktop.

Close all the running programs

If you are on a network or have a full-time connection to the Internet, such as a DSL or cable modem, disconnect the computer from the network and Internet.

Double-click the FxAgentB.exe file to start the removal tool.
When you receive the message telling you start any other applications, click OK.

Click Start to begin the process, and then allow the tool to run.
Restart the computer.

Run the removal tool again to ensure that the system is clean.

Be sure to save the log file the removal tool creates to post back here later.

Run CWShredder immediately. Click on the cwshredder.exe then click "Fix" (Not "Scan only") and let it do its thing.

Please download and run the following programs:

AD-AWARE

Go here: http://www.lavasoftusa.com/support/download/
and download Ad-Aware SE Personal

Install the program and launch it.

First, in the bottom right-hand corner of the main window click on Check for updates now then click Connect and download the latest reference files.

Then, in the main window: Click Start and under Select a scan Mode tick Perform full system scan.

Then, deselect Search ... Read more

Read other 1 answers
RELEVANCY SCORE 55.2

Hi, I am using a windows XP pro Operating System, I have wireless broadband connection, but couldn't able to open any webpage in my firefox browser. I didn't updated anything, my wireless is working fine. Please help me to solve this problem.
 

Read other answers
RELEVANCY SCORE 55.2

Dear Admin,
 
There are multiple pop-ups on my browser. 
 
For example,
 
How to remove a virus? 
 
Then the virus will be bold with a pop-up when my cursor goes on it.
 
 
In addition to that, there are other pop-ups on the side/top/bottom of the site.
 
 
 
Besides that, my computer is getting laggy. Do you have any suggestion to solve this?
 
 
 
My default page will be mystartsearch.com although I have changed it to www.google.com
 
 
The virus is most probably due to the following 3 programmes:
i) WindowsManger pro
ii) Thegophotoit
iii) the hdvid-codec v10
 
I have removed it from the "Uninstall list". When I try and uninstall, they said error occurred and it was removed from the list.
 
 
Kindly guide me how to solve the issue and the computer lag issue.
 
I believe the lag issue is also due to these 3 programmes.
 
 
Things to note: My windows may not be of a genuine copy so I cannot do a windows update.
 
 
 
Looking forward to hear from you soon.
 
Many thanks.
 
Best regards,
 
Kenny Lim
 

A:Pop-ups on my browser & Start page is default in mystartsearch.com

Hi kennylim20 and
 
Download Screen317 Security Check HERE and save it to your Desktop.
* Double-click SecurityCheck.exe
* Follow the onscreen instructions inside of the black box.
* A Notepad document should open automatically called checkup.txt
* Please post the contents of that document.
Note:: If any security program requests permission to access the Internet, allow it to do soPlease download MiniToolBox HERE to your desktop to run it.
Checkmark the following boxes:
* List content of Hosts
* Flush DNS
* Report IE Proxy Settings
* Reset IE Proxy Settings
* Report FF Proxy Settings
* Reset FF Proxy Settings
* List last 10 Event Viewer log
* List Installed Programs
* List Devices (do NOT change any settings here)
* List Users, Partitions and Memory size
Note: When using "Reset FF Proxy Settings" option Firefox should be closed.
Click Go and Copy / Paste the result. (result.txt)Please download Farbar Service Scanner (FSS) HERE and run it on the computer with the issue.
    Make sure the following options are checked:
        Internet Services
        Windows Firewall
        System Restore
        Security Center/Action Center
        Windows Update
        Windows Defender
        Other Services
   ... Read more

Read other 21 answers
RELEVANCY SCORE 55.2

Hello,I want to make my browser start automatically weekly, same day and time and open a specified page.My questions are:1. I tried the Outlook way, like in MS tutorial http://support.microsoft.com/kb/254489.Well, in step 7 there is no "This is an Online meeting" check box in my window, and of course no "NetShow Services", so I can't conclude the setup; the question is what is wrong with Outlook (I use Outlook 2003).2. Is there any other smarter way to do this..?Thanx

Read other answers
RELEVANCY SCORE 55.2

Dear Admin, There are multiple pop-ups on my browser.  For example, How to remove a virus?  Then the virus will be bold with a pop-up when my cursor goes on it.  In addition to that, there are other pop-ups on the side/top/bottom of the site.   Besides that, my computer is getting laggy. Do you have any suggestion to solve this?   My default page will be mystartsearch.com although I have changed it to www.google.com   Things to note: My windows may not be of a genuine copy so I cannot do a windows update.   Looking forward to hear from you soon. Many thanks. Best regards, Kenny Lim

A:Pop-ups on my browser & Start page is default in mystartsearch.com

Dear Admin,
 
I have further information.
 
The virus is most probably due to the following 3 programmes:
i) WindowsManger pro
ii) Thegophotoit
iii) the hdvid-codec v10
 
I have removed it from the "Uninstall list". When I try and uninstall, they said error occurred and it was removed from the list.
 
 
Kindly guide me how to solve the issue and the computer lag issue.
 
I believe the lag issue is also due to these 3 programmes.
 
 
 
Many thanks.
 
Best regards,
 
Kenny.

Read other 4 answers
RELEVANCY SCORE 54.8

My IE start page has been hijacked by clicksearchclick.com. Whenever I start the browser it goes to thier site. Here is the Hijack This Log:

Logfile of HijackThis v1.99.1
Scan saved at 10:15:39 AM, on 5/8/2005
Platform: Windows 2000 SP3 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP3 (5.00.2920.0000)

Running processes:
C:\WINNT\Explorer.EXE
C:\WINNT\System32\hkcmd.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\WINNT\System32\Services\{F34DB3AA-9BB6-45E8-B1A8-75435820E9E9}\SVCHOST.EXE
C:\WINNT\winos.exe
I:\IMC\MPS\iIMCLAN.exe
C:\WINNT\System32\ImcMSGC2.exe
I:\IMC\MPS\Console.EXE
I:\IMC\MPS\PL.EXE
I:\IMC\RMS\Records.exe
I:\IMC\RMS\CASEMGMT.EXE
C:\Documents and Settings\ca3583\Desktop\Repairs\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.clicksearchclick.com/search.php?aff=7
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://info
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O3 - Toolbar: @msdxmLC.dll,[email protected],&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [IgfxTray] C:\WINNT\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINNT\System32\hkcmd.exe
O4 - HKLM\..\Run: [TCASUTIEXE... Read more

A:Solved: browser start page hijacked by clicksearch

Run Hijack This again and put a check by these. Close ALL windows except HijackThis and click "Fix checked"

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.clicksearchclick.com/search.php?aff=7

O4 - HKLM\..\Run: [Service Host] C:\WINNT\System32\Services\{F34DB3AA-9BB6-45E8-B1A8-75435820E9E9}\SVCHOST.EXE

O4 - HKLM\..\Run: [windhost.exe] C:\WINNT\winos.exe

O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/M...bridge-c445.cab

O21 - SSODL: System - {F54C3836-9D1C-45E8-9D0B-B11F760595B5} - ssvmc.dll (file missing)

Restart to safe mode.

How to start your computer in safe mode

First in safe mode click on My Computer then click Tools > Folder Options. In Folder options click on the View tab. Under Files and Folders tick "Show hidden files and folders" then uncheck "Hide file extensions for known file types" and uncheck "Hide protected operating system files (recommended)". Now click "Like current folder" then "Apply" and "OK"

Now find and delete this file:

C:\WINNT\winos.exe

Delete this folder:

C:\WINNT\System32\Services

Also in safe mode navigate to the C:\WINNT\Temp folder. Open the Temp folder and go to Edit > Select All then Edit > Delete to delete the entire contents of the Temp folder.

Go to Start > Run and type %temp% in the Run box. The Temp folder will open. Click Edit > Select All then Edit > Delete to delete t... Read more

Read other 3 answers
RELEVANCY SCORE 54.8

I don't use IE, I use Opera portable
It was not registered as the default browser which it is now,
Clinking on web links within applications (help & support links for example) opens the browser ok, but only to my start page, not to the intended web page.
Also, when I click on a HTML file, it does the same thing. Opens the browser to the start page, not the file.

It's not recognizing the link or the file.

I went through the URL Associations etc. in the registry and they all point to Opera. Protocols point to Opera also. I was successful the 1st time I tried this, but I don't remember exactly how that was different that this time. (I had to load a recent backup image for other unrelated problems left over from a bloated program I couldn't clean out).

Any ideas??

A:Web URL's in programs only open browser to the default start page

Original info from here;
How do I change my default browser to an unlisted program in Windows 7? - Super User

Read other 2 answers
RELEVANCY SCORE 54.8

Hi All. this is the first time I'm using the forum. Would appreciate any help please.

Everytime I go to my toolbar in explorer to review internet options, the home page is set as

res://C:\WINDOWS\system32\shdocpa.dll/security.htm#subID=PRFV;6784

Every time I try to change it to the default page I want http://www.google.com/, it changes it in the box but when you check back it reverts back to

res://C:\WINDOWS\system32\shdocpa.dll/security.htm#subID=PRFV;6784

I haved scanned with SpyBot S&D and used AVG but have had no luck. I have windows 98, yes I know I'm way behind the times! I'm not an expert but ran regedit yesterday and found the above entry under HKEY_CURRENT_USER/Software/Microsoft/InternetExporer/main. The above value data is linked to the value name "Start Page". I tried modifying the data to google, but again it reverts back!

Would someone be able to help me with this and guide me with what I should do?

Many thanks.
 

A:Solved: Browser start page hijacked, can't change . Please help!

Read other 16 answers
RELEVANCY SCORE 54.8

Hi,

Please, I need your help. My browsers (IE, FF and Chrome) keep randomly redirecting to start page. If no browsers are active, the default browser opens instead.

Please, see DDS log:

.
DDS (Ver_11-03-05.01) - NTFS_AMD64
Run by Jean at 0:27:37,38 on 13/05/2011
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Home Basic 6.1.7600.0.1252.55.1046.18.5941.2987 [GMT -3:00]
.
AV: Kaspersky Internet Security *Enabled/Updated* {56547CC9-C9B2-849D-8FEF-A496150D6A06}
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Kaspersky Internet Security *Enabled/Updated* {ED359D2D-EF88-8B13-B55F-9FE46E8A20BB}
FW: Kaspersky Internet Security *Enabled* {6E6FFDEC-83DD-85C5-A4B0-0DA3EBDE2D7D}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32... Read more

A:Browser redirecting randomly to start page and opening...

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 53 answers
RELEVANCY SCORE 52.4

When I try to go to a link I will sometimes get a picture of a red X over a red and yellow box shown on a monthly calender page. I am not able to get to the link. This just happened on my Mcfee virus update page.

What is it and how do I get rid of it?

Thanks

Charles
 

A:Red X over red & yellow box on month calender page

Read other 16 answers
RELEVANCY SCORE 50.8

2 sites about browser usage is giving vastly different data about IE, FF and chrome

pls tell me which one is telling the truth
*************************************
Browser Statistics

2011 April
IE 24.3 %
Firefox 42.9 %
Chrome 25.6 %

FF is leading browser according to above link
*************************************

*************************************
2)
where accroding to wiki data IE is the leading browser
Usage share of web browsers - Wikipedia, the free encyclopedia

Historical usage share

StatCounter (July 2008 to present)

April 2011
IE 44.52%
Firefox 29.67%
Chrome 18.29%

*************************************

A:browser usage by month

I see this in basically all usage statistics online. I have come to consider it normal. Just as my personal benchmarks are usually much higher than what I see posted by similar systems online.

The questions are what criteria is being used to obtain these statistics. As it's basically impossible to tell what everyone on the internet is using there simply is no localized database that contains those figures.

At the end of the day you could walk into a room full of people with colds and determine that everyone on earth has the sniffles.

Read other 3 answers
RELEVANCY SCORE 49.6

Problem: the browser creates unwanted new browsers to unwanted topics.
I believe I followed the directions for the tutorial correctly but may not have done them perfectly, please advise if I need to rerun any parts of it.
Please rename this topic title as it is probably too vague.
I appreciate your help in advance and will be paying attention to replies so I can answer any questions and expedite fixing the issues. You have my gratitude. Gardener1111

DDS.txt
DDS (Ver_09-11-29.01) - NTFSx86
Run by User at 17:31:56.75 on Sat 11/28/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.511.97 [GMT -6:00]

AV: AntiMalware *On-access scanning enabled* (Outdated) {28e00e3b-806e-4533-925c-f4c3d79514b9}
AV: avast! antivirus 4.8.1356 [VPS 091128-2] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Linksys\Linksys Update... Read more

A:MSIE Browser creates another unwanted browser

Hi,My name is Syler and I will be helping you to solve your Malware issues. If you have since resolved your issues I would appreciate if youwould let me no so I can close this topic, if you still need help please let me no what issues you are still having, in your next reply.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up.We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Push the button.Two reports will open, copy and paste them in a reply here:OTListIt.txt <-- Will be openedExtra.txt <-- Will be minimizedThen please post back here with the following logs: OTListIt.txt Extra.txtThanks

Read other 2 answers
RELEVANCY SCORE 49.2

Quote:
Mozilla's Firefox lost share in February, the third consecutive month that the browser has slipped, according to metrics data published today.
Google's Chrome, meanwhile, continued its climb for the 16th straight month.

Firefox lost about 0.2 of a percentage point last month to end with a usage share of 24.2%. It was the third month in a row that Mozilla's browser fell in the rankings posted by Web measurement vendor NetApplications.com. Previous dips in Mozilla's share were one-month blips; this is the browser's first sustained decline in NetApplications' numbers.


Source -
Firefox loses browser share third month running

A:Firefox loses browser share third month running.

'Security flaws' + slower speed + many bug fixes/updates vs new 'in thing' = No real surprise.

Read other 2 answers
RELEVANCY SCORE 48.8

Start to get BSOD since 7/4.

Please see the attached.

Thanks for any helps.

A:BSODs start to appear since a month ago

  
Quote: Originally Posted by andynolife


Start to get BSOD since 7/4.

Please see the attached.

Thanks for any helps.


\

Pool_corruption (memory) (probably from a driver) please run these two tests.
Download a copy of Memtest86 and burn the ISO to a CD using Iso Recorder or another ISO burning program.

Boot from the CD, and leave it running for at least 5 or 6 passes.

Just remember, any time Memtest reports errors, it can be either bad RAM or a bad motherboard slot.

Test the sticks individually, and if you find a good one, test it in all slots.

Driver verifier






Quote:
I'd suggest that you first backup your stuff and then make sure you've got access to another computer so you can contact us if problems arise. Then make a System Restore point (so you can restore the system using the Vista/Win7 Startup Repair feature).

In Windows 7 you can make a Startup Repair disk by going to Start....All Programs...Maintenance...Create a System Repair Disc - with Windows Vista you'll have to use your installation disk or the "Repair your computer" option at the top of the Safe Mode menu .

Then, here's the procedure:
- Go to Start and type in "verifier" (without the quotes) and press Enter
- Select "Create custom settings (for code developers)" and click "Next"
- Select "Select individual settings from a full list" and click "Next"
- Select everything EX... Read more

Read other 7 answers
RELEVANCY SCORE 48.4

Greetings all.My relatively new Dell laptop has been infected with browser hijacks on Firefox ( my main browser ) and now, IE. Google Chrome has not been affected. In the last few days, I also have had the dreaded Blue Screen of Death.I have used HiJackThis before on my old PC.I see a few suspicious entries in here, but you're the experts.~~~~~~~~~~~~~~~~~~~~~~~~~~~~Logfile of Trend Micro HijackThis v2.0.2Scan saved at 4:52:02 PM, on 05/10/2009Platform: Windows Vista SP2 (WinNT 6.00.1906)MSIE: Internet Explorer v8.00 (8.00.6001.18813)Boot mode: NormalRunning processes:C:\Windows\system32\taskeng.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Program Files\Windows Defender\MSASCui.exeC:\Program Files\DellTPad\Apoint.exeC:\Windows\System32\WLTRAY.EXEC:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell.exeC:\Program Files\Dell Support Center\bin\sprtcmd.exeC:\Program Files\AVG\AVG8\avgtray.exeC:\Program Files\BOINC\boinctray.exeC:\Windows\vsnpstd3.exeC:\Program Files\CyberLink\PCM4Everio\EverioService.exeC:\Program Files\IDT\WDM\sttray.exeC:\Program Files\Java\jre6\bin\jusched.exeC:\Windows\System32\hkcmd.exeC:\Windows\System32\igfxpers.exeC:\Windows\ehome\ehtray.exeC:\Program Files&... Read more

A:6 month old Dell Laptop - Blue screen of death and browser hijacks

As per the above, it would appear that I have not correctly posted my problem. My apologies for this error.

~~~~~~~~~~~~~~~~~`
DDS (Ver_09-09-29.01) - NTFSx86
Run by Cameron at 0:03:46.96 on 07/10/2009
Internet Explorer: 8.0.6001.18813 BrowserJavaVersion: 1.6.0_15
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.2.1033.18.2006.902 [GMT -4:00]

SP: Spybot - Search and Destroy *enabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_ae0b52e0\STacSV.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Program Files\Dell\DellDock\DockLogin.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\Syst... Read more

Read other 3 answers
RELEVANCY SCORE 48

When I close down after using the internet often there is a web page remaining from a site I have not been on. It is a sort of pop-up advertising on-line gambling. Is it malware? nothing is showing on a routine scan.

A:unwanted web page

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers
RELEVANCY SCORE 48

Windows xp, ie8.

I have been getting //rvzr-a.akamaihd.net coming up on my pc and I cannot see how to get rid of it, apart from the cancel X at the top of the screen.
Where is it coming from and can I stop it as it takes over the computer when loading.
 

A:unwanted web page

Read other 12 answers
RELEVANCY SCORE 48

I just bought this computer and already I am plagued by the unwanted "Conduit search" page and have thus far, been unable to get rid of it. Can anyone shed some light on this?

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, 64 bit
Processor: Intel(R) Atom(TM) CPU D525 @ 1.80GHz, Intel64 Family 6 Model 28 Stepping 10
Processor Count: 4
RAM: 2037 Mb
Graphics Card: Intel(R) Graphics Media Accelerator 3150, 256 Mb
Hard Drives: C: Total - 138525 MB, Free - 102719 MB;
Motherboard: Acer, Veriton Z290G
Antivirus: PC Cleaner Pro, Updated: Yes, On-Demand Scanner: Disabled

Actually, I am using Vipre Premium Anti Virus
 

A:Unwanted web page

Read other 12 answers
RELEVANCY SCORE 48

I have started getting an unwanted web page show up on my pc.  I'm running windows 7.  In the tab it says (Sponsorship) on the address line it says    m.goodthingshappen.com.  Warns me that my computer is in poor shape.  That it is a certified Microsoft partner and wants me to download a repair tool.  I've run Malware and bytes, CC cleaner. Search and Destroy.  So far it doesn't seem to hurt any thing but it keeps coming back. yipnyapThanksEdit: Moved topic from Windows 7 to the more appropriate forum. ~ Animal

A:Unwanted web page.

 
 Install and run MBAM
Information about MBAM: http://www.bleepingcomputer.com/virus-removal/how-to-use-malwarebytes-anti-malware-tutorial
If this scan has been done, please post the log into your next reply.
===================================================
 
  Running TDSSKiller to obtain log
 
Note: Don't cure or delete a threat, but choose skip for all instead.
Please download TDSSKiller from here and save it to your Desktop
Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters

In the Additional options: Check Detect TDLFS file system
Click Start Scan and allow the scan process to run.
Choose for all threats to Skip for all of them.
Click Continue
Please post the TDSSKiller.[Version]_[Date]_[Time]_log.txt found in your root directory (typically c:\)
===================================================
 
 ESET Online Scanner
 
Note: If your AV is blocking Eset online scanner, please temporarily disable your AV.
 
I'd like us to scan your machine with ESET OnlineScan This process may may take several hours, that is normal.
Hold down Control and click on this link to open ESET OnlineScan in a new window.
Click the  button.
For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
Click on esetsmartinstaller_enu.exe to download the ESET Smart Instal... Read more

Read other 12 answers
RELEVANCY SCORE 47.6

Hi everyone,
I have Win98 and IE6. I have inherited a very unsavoury web page as my home page and I cannot get rid of it. I reset the homepage to yahoo or similar but every time I boot up this other home page (porn)is loaded. I have tried deleting it and searching for it. The search said it was in temp internet files so I deleted it but still it comes back every time I start up. Very frustrating. Please help.
Regards
Ray.
 

A:Unwanted Home Page

Read other 6 answers
RELEVANCY SCORE 47.6

IE page scrolls when I press up/down arrows on my keyboard. Any way to get rid of this nuisance?

I have IE8, Vista SP2.

Read other answers
RELEVANCY SCORE 47.6

Hey,
ive got this problem with my internet explorer browser.
Each time i open it, my home page isnt the one that ive set, its changed to something about spyware.
I know that i have gotten spyware on my computer that is causing this, however none of my scans are showing anything.
Is there a way to delete it from the regisrty?
Any help would be great
Cheers

A:Unwanted Home Page

Hi,
please go through the 'Having problems with spyware/viruses' in my sig. This will help you get rid of the hijack, and remove all the spyware, and hopefully even speed up you computer.

Read other 1 answers
RELEVANCY SCORE 47.6

Hello.
Hope someone can help. As I search on Google, a automatic unwanted new page pops up with an MSN Search on it. How can you turn this off or stop it from happening? If it wasn't MSN one would say its a malware of some kind. Any one know how to deal with it?
Thanks in advance.

A:Unwanted MSN Search page

MSN still has redirects though, and that makes what it is doing malicious (because you are not in control of how your system is working).

Check your hosts file and see if there are any entries there that shouldn't be. That's the easiest way to redirect a search. Did you download any MSN toolbars or anything?

Read other 2 answers
RELEVANCY SCORE 47.6

I seem to be infected with some malware that directs my browser to an unwanted web site--'Adultfriendfinder'.

In Safe Mode, I have run updated versions of AVG, Ewido, Microsoft Antispyware, Spybot S&D, CW Shredder, Adaware w/ VX2, Spyware Blaster, Spyware Guard. Also ran Windows Update for all fixes, etc.

I previously had a program listed in Add/Remove Programs called Mysearchbar, but I couldn't uninstall it, and a search of My Computer didn't locate it. However, the last set of scans seems to have removed it.

Also--possibly related--I am unable to enable Internet Connection Firewall on my dialup connection. I get a message 'Cannot enable shared access. Error 1060: the specified service does not exist as an installed service.' I don't know how to deal with this.

I'm using Windows XP Home.

Here's the Hijackthis log. Any assistance would be much appreciated.

Andy Mason

*******************************

Logfile of HijackThis v1.99.1
Scan saved at 8:26:29 PM, on 2/3/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ntvdm.exe
C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe
C:\Program Files\... Read more

A:Unwanted web page--possible hijack?

I am currently reviewing your log. Please note that this is under the supervision of an expert analyst. I will be back with a fix for your problem as soon as possible.

Please be patient with me during this time.

We also suggest that you Subscribe to this thread to be notified of fixes as soon as they are posted by our Team. You can do this simply by clicking the "Thread Tools" button located in the original thread line and selecting "Subscribe to this Thread".

Read other 12 answers
RELEVANCY SCORE 47.6

Hi-------- Got infected with with something that changed my home page. I have been unable to correct the problem thru Internet options, general tab. Is there some other way to acomplish this task?
 

A:unwanted home page

You will need to download hijackthis and run a scan. Also spybot

see here:
http://www.webattack.com/get/hijackthis.html

http://www.safer-networking.org/index.php?page=download

remember, please check these out BEFORE you start downloading.
When you have run a hijackthis scan then post the logs here and soemone will help you out.

These programs will show you what has taken over and then those with good knowledge of reg entries and viruses will be able to tell you what to fix. good luck
 

Read other 2 answers
RELEVANCY SCORE 47.6

I notice that others have posted something about the subject unwanted page that pops up when I go to some site (like CNET) and click a Download button. The URL of the page is http://rvzr-a.akamaihd.net/sd/wrap-0.01.html?u=http%3A%2F%2Frvzr-a.akamaihd.net%2Fsd%2Fapps%2Ffusionx%2F0.0.3.html%3Faff%3D1700-1016. It is always blank, but pops up in front of the page I'm on. I have run Malwarebytes and SuperAntiSpyware, and they find nothing. I have HiJackThis on my laptop and can run and save a log, but per the instructions, will not do that until asked.

I notice this only happens with Firefox, my default browser. It does not appear if I use IE, so I suspect something has altered the configuration file for Firefox.

What is this thing and how do I stop it from appearing?
 

A:akamaihd.net - unwanted page

Read other 3 answers
RELEVANCY SCORE 47.6

I need to know how to get rid of search-world page which comes on atuuomaticaly when ever i start up

 

A:how to rid computer of an unwanted page

Hi, and welcome to the TSG forum

i suspect you have spyware/virus

have you carried out any scans

anyway
post a hjt log
HIJACK THIS:

Download and copy hijackthis to its own folder , it makes backups so keeping them separate and available can be useful.

Note the Spyware tools websites are very often under attack and so I have provided more than 1 location to download from:

http://www.tomcoyote.org/hjt/
http://209.133.47.200/~merijn/downloads.html
http://www.thespykiller.co.uk/
http://www.majorgeeks.com/download3155.html
http://aumha.org/downloads/hijackthis.exe
http://www.thewhities.com/
http://www.sherrylynn.us/privacypolicy (this has an older version 1.97 - if you can not get to any of the above sites)

Close all open windows and open Hijack This. Click “Scan”. When the scan is finished (it only takes a second), the scan button will change to “Save Log”.
Click on “Save Log” and then save it to NotePad.
Click on “Edit” – “Select all” – “copy” and then “paste” into the thread.
DO NOT FIX ANYTHING wait advice from one of the many security experts in this forum.

I currently do not have the skill/competence to advise and poor advice can be far more damaging to your PC with this software, and so I will be unable to add any advice on the log and so will nolonger be replying to your post with regards to the HJT issue, so please have patience and wait for one of the secruity experts to provide further detailed advice

i will however, be notifie... Read more

Read other 1 answers
RELEVANCY SCORE 47.6

I have a Lexmark Optra Lxi + printer connected to a NetWare 4.11 server by parrallel cable. I have two new computers using Windows 2000 Pro and every time I print from those machines I get a sort of cover page with the users name spelled out ascii style:

and some other information including the app that sent the print job, time, etc. I can't seem to find out out to shut this function off.

I have 4 other machines running Win98 and they DO NOT get the extra cover page when they print.

Thanks.

PS I put this in networking because I'm not sure if the problem is with the server (Novell) or the clients printing on the network (Win2K)
 

A:Unwanted Cover Page

Read other 12 answers
RELEVANCY SCORE 47.6

I have windows xp and MSIE 7. AOL 9.0 SE was installed on my computer (stuck with dial-up due to geography). When I now open MSIE, the AOL Toolbar page is the opening page. Even though it is supposed to not appear once use, it continues to come up as the opening page in MSIE, even though my home page is Google. I understand that removel of the AOL toolbar does not solve this problem and compounds the problem with error messages in MSIE. Help please!

Read other answers
RELEVANCY SCORE 47.6

Can anyone help me get rid of unwanted home page & pop-ups. If have run NoAdware and HijackThis which shows all sorts of R0, R1, O2 and O4 lines in log file which means little to me.

These programs can't seem to fix these unwanted statements in registers however ? How to get rid of it ? Tx, Michiel
 

A:How to get rid off unwanted home page ?

Read other 16 answers
RELEVANCY SCORE 47.6

I am running a Dell desktop win xp pro sp 3. I have a worm that I cannot remove. It will open additional pages in IE that seem to be selling or advertising info. I have the pop up blocker on. Using Avast professional addition. I have done a full system scan and a boot time scan, both indicate signs of a trojan but cannot delete or move. I also run updated versions of Ad-Aware and Spybot search & destroy and delete what they find. Also have run CCleaner and delete what it finds. I did have the postcard.exe virus/worm, but now it appears to be gone, but the IE pages still open as well as some pages won't open at all. Please advise what more I can do. Thanks - Kevin

A:Unwanted Page redirects and pop ups

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

Please copy this page to Notepad and Save it to your Desktop in order to assist you when carrying out the following instructions.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding.
Ensure that there aren't any opened browsers when you are carrying out the procedures below.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

------------------------------------------------------

Please uninstall the following via Start->(or My Computer)->Control Panel->Add or Remove Programs if it still exists:

Viewpoint Media Player<<This is ... Read more

Read other 2 answers
RELEVANCY SCORE 47.6

Hey all,

I don't know how this happened, but I now have this default home page for some weird search portal which I don't know how to get rid of.

I can change to another page through tools->internet options then home page, but every time I restart the computer, it will go back to this default unwanted home page.

I have a feeling you need to change something in the registry, what I don't know - anyone have an idea out there or any other methods of getting rid of this.

I have tried using a few spyware detectors to no avail either.

Thanks - any comments very much appreciated
 

A:Unwanted Home Page

Read other 10 answers
RELEVANCY SCORE 47.6

Hi there.
I have a machine that runs Vista. A few days ago I had become the recipient of an unwanted toolbar or web page that calls itself Mywebsearch. I say toolbar or web page because I&#8217;m not absolutely sure which of the two it is. Maybe it&#8217;s both. My normal home page is Google, and I want it to stay that way too. When I go onto the Net, my Google home page is there. But when I visit anything and return to my home page by clicking on the home icon, that home page changes toMywebsearch. It doesn&#8217;t make any difference using the function &#8220;Make Google my home page&#8221;, because Mywebsearch overrides it.

I have gone looking on the Net for ways to remove this Mywebsearch trash, and so far they all seem to involve going to the Control Panel and removing programs called &#8220;My Web Search&#8221; and &#8220;My Search Assistant.&#8221; I cannot find these programs on the list. How the hell do I get rid of this creepy trash?

Thanks for your time
 

A:Unwanted toolbar/ web page

Read other 6 answers
RELEVANCY SCORE 47.6

Hi, I followed your advice for Scrollisalegend about an unwanted web page... It was the same page that was plague-ing me, so I followed the same directions. Here is my Hijackthis log...
Logfile of HijackThis v1.97.3
Scan saved at 1:43:28 PM, on 11/3/2003
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\ptsnoop.exe
C:\WINDOWS\SYSTEM\DLA\TFSWCTRL.EXE
C:\WINDOWS\SYSTEM32\DRIVERS\DCFSSVC.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\HP SHARE-TO-WEB\HPGS2WND.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\SYSTEM\IGFXTRAY.EXE
C:\WINDOWS\SYSTEM\HKCMD.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\HP SHARE-TO-WEB\HPGS2WNF.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\KODAK\KODAK EASYSHARE SOFTWARE\BIN\EASYSHARE.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\DIGITAL IMAGING\BIN\HPOBNZ08.EXE
C:\PROGRAM FILES\LOGITECH\WINGMAN PROFILER\LWPEVNTM.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\DIGITAL IMAGING\BIN\HPOEVM08.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\DIGITAL IMAGING\BIN\HPOSTS08.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\UNZIP WIZARD\UNZIPWIZ.EXE
C:\TEMP\UNZIPWIZ\HIJACKTHIS.EXE

R0 - HKLM\Software\Microsoft\I... Read more

A:unwanted web home page also

well if you had the same problem as Scrollisalegend then you had a CWS hijack, running the programs from that thread cured the problem, but to ensure you stay cured
read here and download the security updates mentioned at the bottom
http://www.spywareinfo.com/~merijn/cwschronicles.html
 

Read other 1 answers
RELEVANCY SCORE 47.6

Hi..I'm new here so please bear with me.

Every time I switch on my pc and go online I get a web page come up that has replaced my home page of choice. A search engine I've never heard of and don't want.
I go into settings/general and delete it and put in my own web page of choice only to have it reappear next time I go online. Is there any way I can get rid of this for good and keep my home page of choice permenantly.

Thanks for any advice.
 

A:Unwanted home page ?!?

Read other 9 answers
RELEVANCY SCORE 47.6

When I start the computer, it shows the desktop for a second, then a file opens. I just have to click the red "X" in the top right corner and it goes back to the desktop, but how do I get rid of the file that opens. It is called "common" and there's nothing in it.
 

A:Unwanted page at boot up.

What program is "common" opening in? Or is it a file folder?
Click the Help menu to see what program -- if it just says About Windows, then it is a folder that is opening in My Computer. If so, check the address bar to see the full path to this folder. If the address bar is not displayed, click View | Toolbars and check it. If your system is not set to display the full path, you can click the down arrow at the right end of the address bar, and that will let you see just where this "Common" folder is located. paste that path into your next reply.
Or, you can click Tools | Folder Options..., View tab, and check one of the Display the full path in the ??? bar options.

Whether it's a folder, or a file opening in a program, we need to find out where it's starting from. Copy and paste the following code into Notepad, then save it on your desktop as Runkey.bat Be sure you set the Save As Type: setting to All Files. Then double click the file. A notepad window will open up. Paste the contents into your next reply.

Code:
if exist regkey.txt del regkey.txt
>> regkey.txt reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /s
>> regkey.txt reg query "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /s
>> regkey.txt reg query "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer" /v DesktopProcess
Start regkey.txt
Exit
Also, check the startup folder (Start | All Programs | Startup) to see if ... Read more

Read other 3 answers
RELEVANCY SCORE 47.6

I must have opened a funky e-mail. Somehow every time I reboot, the home page on my IE6 goes to a search engine that I do not want. I have tried changing the home page and it works until I reboot. I have also gone into regedit and changed the home page spec, but it still changes at reboot. How can I get rid of this thing?
 

A:unwanted home page

Read other 15 answers
RELEVANCY SCORE 47.6

Can anyone help with removing the pagebreak on page 1 (so as to bring page 1 and 2 together?) thanks
 

A:unwanted page break

Hi ibm.

Not sure what overall result you're looking for, but try this.

1. Select the entire table.

2. Table > Table Properties > Row: uncheck "Specify height", check "Allow row to break across pages".

hth,
bomb
 

Read other 3 answers