Over 1 million tech questions and answers.

Unwanted home page keeps coming back

Q: Unwanted home page keeps coming back

My OS is Windows XP. My browser is Mozilla Firefox. I went into Firefox options and set my home page to I Google. Now you would think that the home page should stay the one you want. but mine does not. When i log out of Firefox and then log back in a home page called Fastp2psearch.com becomes my home page. I've tried several ways to get rid of it for good to no avail. Does anyone know how to remove this for good?

RELEVANCY SCORE 200
Preferred Solution: Unwanted home page keeps coming back

I recommend downloading and running Outlook PST Repair. It's a PST repair tool that I've used it in the past to recover emails, contacts, tasks and notes from corrupt Outlook files that are damaged or inaccessible. Supports Outlook 2000, 2002, 2003, 2007, 2010 and 2013.

You can download it direct from this link http://goo.gl/1bjhSi. (This link will automatically start a download of Outlook PST Repair that you can save to your computer.)

A: Unwanted home page keeps coming back

Hi satisfier. Welcome to TSF!

Any chance you use Limewire, Napster, or other P2P software? Sounds like you have a browser hijacker.

Mike

Read other 1 answers
RELEVANCY SCORE 84.8

Hey all, the other day i was browsin on the internet and all the suddenly my browser came to a stop(IE), it displayed a page that was basically the broken link page but said something along the lines of "Webpage blocked, Virus warning" in big red text and had links to: http://www.e-finder.cc/hp.
obvisouly wasnt a default windows page, i realised i had been hit by spyware. anyway sure enough i ran Adaware SE, Spybot S&D, CWshredder and HijackThis.
cleaned and fixed all that i could find, ended up fixing it so i could now browse (something about a broken LSP, fixed it though). but the profblem i still have is the Home page keeps changing to http://default.home/ which then redirects me to http://www.e-finder.cc/hp, i keep fixing and fixing entries in HJT and the above mentioned tools and it keeps coming back, ran them in safe mode still it continues to come back. i stopped it with Spyware Guard, it prompts me that the home page is being changed and asks me if i want to keep the current one, the problem is it pops-up twice everytime a page loads(makes browsing terrible).
thats basically what my problem is, all tools are upto date and scanned for viruses with AVG(upto date).

heres my HJT log:

Logfile of HijackThis v1.99.0
Scan saved at 8:33:37 PM, on 29/12/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\syste... Read more

A:HJT log: Home page locked, problem keeps coming back?

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should not have any open browsers when you are following the procedures below.

Go to My Computer->Tools/View->Folder Options->View tab and make sure that 'Show hidden files and folders' (or 'Show all files') is enabled. Also make sure that Display the contents of System Folders' is checked. Windows XP's search feature is a little different. When you click on 'All files and folders' on the left pane, click on the 'More advanced options' at the bottom. Make sure that Search system folders, Search hidden files and folders, and Search subfolders are checked.

For the options that you checked/enabled earlier, you may uncheck them after your log is clean. If we ask you to fix a program that you use or want to keep, please post back saying that (we don't know every program that exists, so we may tell you to delete a program that we think is bad to keep).

Turn off system restore by right clicking on My Computer and go to Properties->System Restore and check the box for Turn off System Restore. Click Apply and then OK. Restart your computer. After we are finished with your log file and verified that it's clean, you may turn it back on and create a new restore point.

Download CWShredder and click on 'Fix' (it will automatical... Read more

Read other 4 answers
RELEVANCY SCORE 74

The highlighted service is keeps coming back after I end it.
How do I permanently stop this service?
 

A:Unwanted Service keeps coming back

Read other 10 answers
RELEVANCY SCORE 73.2

Initial symptoms:
a) Firefox started trying to open "file:///C:/ProgramData/Airstrongs/snp.sc" on startup
b) Target on firefox shortcut changed to '"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" %SNF%'
c) "findit" installed as a one-click search engine
d) Some websites started showing ads "Powered by SafeFinder"
e) There is a process "Airstrong.exe" running at all times

Same issues as initial keep coming back even after using multiple anti-malware programs

Used:
Malwarebytes Anti-Malware
AdwCleaner
JRT
 

A:Potentially unwanted software keeps coming back

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

Read other 0 answers
RELEVANCY SCORE 71.6

Hello,
I had an infections by many trojans horses recently and some malwares. I get rid of the majority of them, but one seems problematic when I scan with AVG : tk58.exe, he keeps coming back at each restart. It is possible there's some others left too I didn't detect. As asked in the 5 steps...

PANDA SCAN


Incident Status Location

Adware:Adware/Zenosearch Not disinfected c:\windows\system32\scntnlwb.exe
Adware:adware/commad Not disinfected c:\windows\uninstall_nmon.vbs
Spyware:Cookie/888 ... Read more

A:Trojan horse tk58.exe keeps coming back - occasional unwanted pop-up

Bump.

Thanx,

Bordeau

Read other 5 answers
RELEVANCY SCORE 66.8

Hey,
ive got this problem with my internet explorer browser.
Each time i open it, my home page isnt the one that ive set, its changed to something about spyware.
I know that i have gotten spyware on my computer that is causing this, however none of my scans are showing anything.
Is there a way to delete it from the regisrty?
Any help would be great
Cheers

A:Unwanted Home Page

Hi,
please go through the 'Having problems with spyware/viruses' in my sig. This will help you get rid of the hijack, and remove all the spyware, and hopefully even speed up you computer.

Read other 1 answers
RELEVANCY SCORE 66.8

Hi... I bet you guys get this a lot...... but somehow I've become stuck with some po*y searchco as my home page and I don't want it. Dunno how this happend. Can someone please show me how to get rid of it...
 

A:Unwanted home page ?!?

Click on the link in my signature to download Hijack This. Download it and click "Save".

It’s very important that you save it to its own folder on your hard drive, such as program files (not temporary files or the desktop), so that it can create proper back-ups and be able to restore them if necessary.

The downloaded program will be a .zip file. Extract the .exe file from it and save in the permanent folder you just created.

Click on Hijackthis.exe to launch the program.

Click the "Scan" button when the scan is finished the scan button will become "Save Log" click that and save the log.

The log should open in notepad. Click on "Edit > Select All" then click on "Edit > Copy" then Paste the log back here in a reply.

DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
 

Read other 1 answers
RELEVANCY SCORE 66.8

Hi..I'm new here so please bear with me.

Every time I switch on my pc and go online I get a web page come up that has replaced my home page of choice. A search engine I've never heard of and don't want.
I go into settings/general and delete it and put in my own web page of choice only to have it reappear next time I go online. Is there any way I can get rid of this for good and keep my home page of choice permenantly.

Thanks for any advice.
 

A:Unwanted home page ?!?

Read other 9 answers
RELEVANCY SCORE 66.8

Hi-------- Got infected with with something that changed my home page. I have been unable to correct the problem thru Internet options, general tab. Is there some other way to acomplish this task?
 

A:unwanted home page

You will need to download hijackthis and run a scan. Also spybot

see here:
http://www.webattack.com/get/hijackthis.html

http://www.safer-networking.org/index.php?page=download

remember, please check these out BEFORE you start downloading.
When you have run a hijackthis scan then post the logs here and soemone will help you out.

These programs will show you what has taken over and then those with good knowledge of reg entries and viruses will be able to tell you what to fix. good luck
 

Read other 2 answers
RELEVANCY SCORE 66.8

I must have opened a funky e-mail. Somehow every time I reboot, the home page on my IE6 goes to a search engine that I do not want. I have tried changing the home page and it works until I reboot. I have also gone into regedit and changed the home page spec, but it still changes at reboot. How can I get rid of this thing?
 

A:unwanted home page

Read other 15 answers
RELEVANCY SCORE 66.8

My operating system is Windows 98. I have an annoying website that comes up as my homepage when I connect onto the internet. It doesn't always come up immediately either. What I see first is a message box saying that a plugin is in progress and then the unwanted webpage pops up. How can I once and for all get rid of this website file???

Thanks for any help.
undefined

A:Unwanted home page

Your Homepage has been Hijacked. Go to the security site on this Forum .
Download and run Hijack this and post your log in the Hijack this site and one of the Security Experts will help you.

Read other 2 answers
RELEVANCY SCORE 66.8

Hi everyone,
I have Win98 and IE6. I have inherited a very unsavoury web page as my home page and I cannot get rid of it. I reset the homepage to yahoo or similar but every time I boot up this other home page (porn)is loaded. I have tried deleting it and searching for it. The search said it was in temp internet files so I deleted it but still it comes back every time I start up. Very frustrating. Please help.
Regards
Ray.
 

A:Unwanted Home Page

Read other 6 answers
RELEVANCY SCORE 66.8

Hi, I followed your advice for Scrollisalegend about an unwanted web page... It was the same page that was plague-ing me, so I followed the same directions. Here is my Hijackthis log...
Logfile of HijackThis v1.97.3
Scan saved at 1:43:28 PM, on 11/3/2003
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\ptsnoop.exe
C:\WINDOWS\SYSTEM\DLA\TFSWCTRL.EXE
C:\WINDOWS\SYSTEM32\DRIVERS\DCFSSVC.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\HP SHARE-TO-WEB\HPGS2WND.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\SYSTEM\IGFXTRAY.EXE
C:\WINDOWS\SYSTEM\HKCMD.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\HP SHARE-TO-WEB\HPGS2WNF.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\KODAK\KODAK EASYSHARE SOFTWARE\BIN\EASYSHARE.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\DIGITAL IMAGING\BIN\HPOBNZ08.EXE
C:\PROGRAM FILES\LOGITECH\WINGMAN PROFILER\LWPEVNTM.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\DIGITAL IMAGING\BIN\HPOEVM08.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\DIGITAL IMAGING\BIN\HPOSTS08.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\UNZIP WIZARD\UNZIPWIZ.EXE
C:\TEMP\UNZIPWIZ\HIJACKTHIS.EXE

R0 - HKLM\Software\Microsoft\I... Read more

A:unwanted web home page also

well if you had the same problem as Scrollisalegend then you had a CWS hijack, running the programs from that thread cured the problem, but to ensure you stay cured
read here and download the security updates mentioned at the bottom
http://www.spywareinfo.com/~merijn/cwschronicles.html
 

Read other 1 answers
RELEVANCY SCORE 66.8

Hey all,

I don't know how this happened, but I now have this default home page for some weird search portal which I don't know how to get rid of.

I can change to another page through tools->internet options then home page, but every time I restart the computer, it will go back to this default unwanted home page.

I have a feeling you need to change something in the registry, what I don't know - anyone have an idea out there or any other methods of getting rid of this.

I have tried using a few spyware detectors to no avail either.

Thanks - any comments very much appreciated
 

A:Unwanted Home Page

Read other 10 answers
RELEVANCY SCORE 66.8

Logfile of HijackThis v1.97.7Scan saved at 12:14:35 PM, on 4/28/04Platform: Windows 98 SE (Win9x 4.10.2222A)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\SYSTEM\KERNEL32.DLLC:\WINDOWS\SYSTEM\MSGSRV32.EXEC:\WINDOWS\SYSTEM\MPREXE.EXEC:\WINDOWS\SYSTEM\MSTASK.EXEC:\PROGRAM FILES\CA\ETRUST\INOCULATEIT\INOTASK.EXEC:\PROGRAM FILES\CA\ETRUST\INOCULATEIT\INORT9X.EXEC:\WINDOWS\EXPLORER.EXEC:\WINDOWS\TASKMON.EXEC:\WINDOWS\SYSTEM\SYSTRAY.EXEC:\MOUSE\SYSTEM\EM_EXEC.EXEC:\WINDOWS\LOGWAT95.EXEC:\PROGRAM FILES\CA\ETRUST\INOCULATEIT\REALMON.EXEC:\WINDOWS\SYSTEM\QTTASK.EXEC:\WINDOWS\OLEHELP.EXEC:\PROGRAM FILES\HANDSPRING\HOTSYNC.EXEC:\WINDOWS\SYSTEM\DDHELP.EXEC:\WINDOWS\SYSTEM\PSTORES.EXEC:\WINDOWS\SYSTEM\SPOOL32.EXEC:\PROGRAM FILES\WINZIP\WZQKPICK.EXEC:\UNZIPPED\HIJACKTHIS\HIJACKTHIS.EXER1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://any-find.com/sp.htmR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://any-find.com/sp.htmR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://any-find.com/index.htmR0 - HKLM\Software\Microsoft\Intern... Read more

A:unwanted home page

You are infected with a variant of the CoolWebSearch.Download CWShredder from the below link and unzip it into a directory. Start CWShredder and click on the FIx button to have it remove all CWS infections it finds.Download CWShredder from:http://www.merijn.org/files/cwshredder.zipAfter you download the program, unzip it into a directory. Make sure all browser windows are closed and double click on the cwshredder.exe to start the program. When the program is loaded click on the "Check for Update" button, and if it finds an new version it will download it. You should then double click on cwshredder.exe again and click on the "FIX" button (not the "Scan only" button) and let it scan your computer.To get the best results it is recommended that you run it in safe mode. Reboot windows and press F8 at boot/windows startup, usually right after the beep. Then select safe mode.A tutorial that goes over this process step by step can be found here:How to remove CoolWebSearch with CoolWeb ShredderOnce that is completed you should follow these steps in order to clean your computer of Malware which can include Viruses, Trojans, Worms, Spyware, Hijackers and DialersStep 1:Download Spybot and Adaware from the following locations and install them. You should run both programs and clean up what it finds. This is to gaurantee that you find the most malware you can installed on your computer.Before running the scans on both programs, it is mandatory that you updat... Read more

Read other 2 answers
RELEVANCY SCORE 66.8

Can anyone help me get rid of unwanted home page & pop-ups. If have run NoAdware and HijackThis which shows all sorts of R0, R1, O2 and O4 lines in log file which means little to me.

These programs can't seem to fix these unwanted statements in registers however ? How to get rid of it ? Tx, Michiel
 

A:How to get rid off unwanted home page ?

Read other 16 answers
RELEVANCY SCORE 66.4

help!!!!
i have tries going on settings and and changing the start engines and extentions.
i cant get rid of it.
please reply asap!!!!
 

A:start.qone8 page keeps coming back on chrome

Hello ningakat I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same"... Read more

Read other 14 answers
RELEVANCY SCORE 66.4

I have several users who connect from home over Cisco VPN. Many of them can not access the corporate home page when they sign into VPN, but they can get to other network resources. I need to know where we are going wrong here, they can get their e mail, but also can not get to our Citrix boxes. The main problem is getting the corporate page, what it does, is goes to their providers page. Any suggestions? XP SP2, Cisco VPN Client 5.0.

Thank you

Read other answers
RELEVANCY SCORE 66

hi, this keeps happening and i remove the home page and set it back to the original but it keeps being hijacked. i ran the hijack and this is the result. any help is appreciated.

Logfile of HijackThis v1.97.7
Scan saved at 8:57:44 AM, on 11/21/2003
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\Ati2evxx.exe
C:\WINNT\MS\SMS\CORE\BIN\CLISVCL.EXE
C:\WINNT\System32\svchost.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\Program Files\Verizon Online\WinPoET\WrOS.EXE
C:\WINNT\system32\svchost.exe
C:\WINNT\MS\SMS\CLICOMP\RemCtrl\Wuser32.exe
C:\WINNT\MS\SMS\clicomp\apa\Bin\smsapm32.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINNT\system32\atiptaxx.exe
C:\WINNT\MS\SMS\CORE\BIN\LAUNCH32.EXE
C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Verizon Online\WinPoET\winpppoverethernet.exe
C:\WINNT\MS\SMS\CLICOMP\SWDist32\bin\smsmon32.exe
C:\Program Files\CheckPoint\SecuRemote\bin\fwenc.exe
C:\PROGRA~1\FTPSOF~1\ONNETH~1\tnvt\tnvt.exe
C:\Lotus\Notes\NLNOTES.EXE
C:\Lotus\Notes\nwrdaemn.EXE
C:\Lotus\Notes\nupdate.EXE
C:\Documents and Settings\kandah... Read more

A:unwanted home page setting

there is nothing showing in the log
but
First
Download & Run CWshredder from
http://www.spywareinfo.com/~merijn/cwschronicles.html
and make sure you follow the advice about the security updates listed at the bottom of the page, in

order to prevent re-infection
then reboot &
Download Spybot - Search & Destroy from http://security.kolla.de

After installing, first press Online, press search for updates, then tick the updates it finds, then

press download updates. Beside the download button is a little down pointed arrow, select one of

the servers listed. If it doesn't work or you get an error message then try a different server

Next, close all Internet Explorer and OE windows, press 'Check for Problems', and have SpyBot

remove all it finds that is marked in RED.

then reboot &
download AdAware 6
Before you scan with AdAware, check for updates of the reference file by using the "webupdate".
Then ........

Make sure the following settings are made and on -------"ON=GREEN"
From main window :Click "Start" then " Activate in-depth scan"

then......

click "Use custom scanning options>Customize" and have these options on: "Scan within archives"

,"Scan active processes","Scan registry", "Deep scan registry" ,"Scan my IE Favorites for banned URL"

and "Scan my host-files"

then.........

go to settings(the gear on top of AdAw... Read more

Read other 3 answers
RELEVANCY SCORE 66

I recently downloaded Babylon Translator but decided to opt out. I did a search of Cdrive
and deleted all that was found. The trouble is that when I opened Mozilla Firefox instead
of coming up with my default Home Page (which is my ISP's HP), I got a Babylon Search Engine which has been "enhanced by Google". To my mind it is a Google alias. In German to boot.
I went to Control Panel>Internet Options and my default HP is as it should be,my ISP.
I have looked all over the Control Panel,Program Files and elsewhere to no avail.
How can I get rid of this Babylon engine whose address is search.babylon.com/home.
A look in Firefox also was no good.
Please help,
Regards, brianml.

Below is a summary of my machine.

Computer Profile Summary
Computer Name: Brians-computer (in MSHOME)
Profile Date: Monday, 10 March 2008 11:34:29 AM
Advisor Version: 7.2v
Windows Logon:

Click here for Belarc's System Management products, for large and small companies.

Operating System System Model
Windows XP Home Edition Service Pack 2 (build 2600) No details available
Processor a Main Circuit Board b
2.13 gigahertz Intel Core 2 Duo
64 kilobyte primary memory cache
4096 kilobyte secondary memory cache Board: ASUSTeK Computer INC. P5L-VM 1394 Rev 1.xx
Bus Clock: 266 megahertz
BIOS: American Megatrends Inc. 0304 09/05/2006
Drives Memory Modules c,d
400.09 Gigabytes Usable Hard Drive Capacity
368.47 Gigabytes Hard Drive Free Space

HL-DT-ST RW/DVD GCC-4520B [CD-ROM drive]
PIONEER... Read more

A:Solved: Unwanted Home Page.

Read other 7 answers
RELEVANCY SCORE 66

Can anyone please help.

My home page has been changed to an unwanted search engine which has the address, use blank. At the same time I get pop-ups regarding spy-ware. Also since this happened I cannot activate my desktop icons without being online If I do the computer just freezes and I have to reboot. I have tried many things including re-setting web settings and I have used spy-bot search and destroy and ad-aware but I just can't remove them. I understand that the only other method would be to re-install windows or re-set the registry. Any advice.

Thanks
 

A:[resolved]unwanted home page

Hi paul.m, and welcome to TSG

I'm not a security expert but there are some who donate their expertise on this site. However they will want to see a copy of a "HijackThis" (HJT) log to help you properly.

If the hijack is really bad (i.e. fast) try and download startpage guard as a temporary measure to keep you on the one page and then download and run SpywareBlaster (this is a preventative to help stop further infections) and CWShredder and also check for updates on Ad-Aware and spybot to see whether you have the very latest versions.

Also, get HijackThis (HJT) and if there still problems, post a HJT log here and wait for one of the security experts to get to you.

For Spyware tools, some sites to download from are:

http://www.tomcoyote.org/hjt/
http://209.133.47.200/~merijn/downloads.html
http://www.thespykiller.co.uk/
http://www.sherrylynn.us/privacypolicy
http://www.snapfiles.com/get/startpageguard.html

Good luck!!
 

Read other 2 answers
RELEVANCY SCORE 66

Problem: I am unable to change my home page setting.

Operating system: Windows XP.

I have always used “Blank” as my home page setting However last week something got into my computer and changed my homepage to “searchpage.html”.

When I open up Widows Explorer instead of a blank screen I get “Searchpage”. If I type in say www.vote.com another search page is displayed with the following message:

“You try to go to the vote.com
For visit this site follow this link: HTTP://vote.com
or type in full url (including HTTP://) in the adress bar.”

I have tried to delete “C:\searchpage.html” from my C: drive but it keeps coming back.
I have also tried to use another web site for my home page but it always goes back to “about:blank”. I also have a “about” icon on my desktop that I can’t delete.

How do I get rid of this junk.

Can someone please HELP!

GVD60
 

A:Unwanted home page setting

Read other 9 answers
RELEVANCY SCORE 66

Noticed on my computer today that there was a new homepage. Super Anti-Spyware clean and Avira clean, but MBAm found a PUP. Here is the mbam log

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 2/2/2015
Scan Time: 9:21:37 PM
Logfile: mbam.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.02.03.01
Rootkit Database: v2015.01.14.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: songe_000

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 347127
Time Elapsed: 39 min, 28 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 1
PUP.Optional.WebSearch.A, C:\Users\songe_000\AppData\Roaming\Mozilla\Firefox\Profiles\2lsg6gue.default\searchplugins\Web Search.xml, Quarantined, [62abc258dcae00367335467ac93a966a],

Physical Sectors: 0
(No malicious items detected)
(end)
 

A:Unwanted home page change

When I Iooked at my anti-virus report this evening it said no viruses were detected but I didn't notice at first that it said there were 2 warnings. So I am posting that report as well.

Avira Free Antivirus
Report file date: Monday, February 2, 2015 20:59
The program is running as an unrestricted full version.
Online services are available.

Licensee : Avira Antivirus Free
Serial number : 0000149996-AVHOE-0000001
Platform : Windows 8.1
Windows version : (plain) [6.2.9200]
Boot mode : Normally booted
Username : SYSTEM
Computer name : MOMSPC

Version information:
BUILD.DAT : 14.0.7.468 91859 Bytes 11/24/2014 10:23:00
AVSCAN.EXE : 14.0.7.462 1015544 Bytes 12/17/2014 07:58:14
AVSCANRC.DLL : 14.0.7.308 54576 Bytes 11/19/2014 05:32:33
LUKE.DLL : 14.0.7.462 60664 Bytes 12/17/2014 07:58:28
AVSCPLR.DLL : 14.0.7.440 93488 Bytes 12/17/2014 07:58:14
REPAIR.DLL : 14.0.7.412 366328 Bytes 12/17/2014 07:58:13
REPAIR.RDF : 1.0.4.40 695717 Bytes 2/1/2015 08:14:57
AVREG.DLL : 14.0.7.310 264952 Bytes 11/19/2014 05:32:28
AVLODE.DLL : 14.0.7.440 561456 Bytes 12/17/2014 07:58:13
AVLODE.RDF : 14.0.4.54 78895 Bytes 12/5/2014 20:43:08
XBV00014.VDF : 8.11.165.190 2048 Bytes 8/7/2014 18:44:30
XBV00015.VDF : 8.11.165.190 2048 Bytes 8/7/2014 18:44:30
XBV00016.VDF : 8.11.165.190 2048 Bytes 8/7/2014 18:44:30
XBV00017.VDF : 8.11.165.190 2048 Bytes 8/7/2014 18:44:30
XBV00018.VDF : 8.11.165.190 2048 Bytes 8/7/2014 18:44:30
XBV00019.VDF : 8.11.165.1... Read more

Read other 31 answers
RELEVANCY SCORE 65.2

Hi there.
I have a machine that runs Vista. A few days ago I had become the recipient of an unwanted toolbar or web page that calls itself Mywebsearch. I say toolbar or web page because I’m not absolutely sure which of the two it is. Maybe it’s both. My normal home page is Google, and I want it to stay that way too. When I go onto the Net, my Google home page is there. But when I visit anything and return to my home page by clicking on the home icon, that home page changes to Mywebsearch. It doesn’t make any difference using the function “Make Google my home page”, because Mywebsearch overrides it.

I have gone looking on the Net for ways to remove this Mywebsearch trash, and so far they all seem to involve going to the Control Panel and removing programs called “My Web Search” and “My Search Assistant.” I cannot find these programs on the list. How the hell do I get rid of this creepy trash? (I'd really like to confront some of the creeps who create trash like this.)

Thanks for your time
 

A:Creepy unwanted toolbar/home page

closed duplicate
 

Read other 1 answers
RELEVANCY SCORE 65.2

I first came across your site in Apr and began following instructions on "preparation". Got quite frustrated running into programs I could not readily download or utilize for some reason or other but mostly as I am running on a dial-up connection (and continually got "cut-off" here 'n there).I started ALL OVER AGN this past week doing everything I could. Coupled with what I had learned from my sojourn in Apr I THINK the original "problem" has now been handled - I CAN now "maintain my own background pic AND I am not having to reset my Home Page every time I re-boot" HOWEVER, I would like to KNOW that the problem has truly been handled and that there are no lingering "bits,bytes,pieces" that may crop up somewhere and start this all over again OR if there is anything ELSE (which you might see) that I should take care of before it does get out-of-hand ???I also have some questions on how I might better "make this computer my own" as it was a hand me down gift from a friend and I don't use "all the bells and whistles" but don't think they belong in this forum and would appreciate any redirection/suggestions.Thx a million - jts (here's the reports) :Deckard's System Scanner v20071014.68Run by Larry Schleusner on 2008-07-08 15:06:39Computer is in Normal Mode.---------------------------------------------------------------------------------- System Restore --------------------------------------------------------... Read more

A:Sorry - Name Unk - Continually Directed To Unwanted Home Page

Sorry for the delay. If you are still having problems please post a brand new HijackThis log as a reply to this topic. Before posting the log, please make sure you follow all the steps found in this topic:Preparation Guide For Use Before Posting A Hijackthis LogPlease also post the problems you are having.

Read other 1 answers
RELEVANCY SCORE 65.2

Hey, I went on this website a couple of days ago and it askd me if i wanted it as my homepage, I clicked no and thought everything was all gd. But now I've realised that it HAS became my homepage and I tried to reset google as my homepage but it refuses to go away. I've scanned with Norton and Spybot but have both been useless. HELP PLEASE :(

A:Unwanted home page on Internet Explorer!!!!

Hello and Welcome to TSF.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers
RELEVANCY SCORE 64.8

I first encountered the Vista Home Security 2012 on Sunday, December 18th, 2011.
I did everything that http://www.bleepingcomputer.com/virus-removal/remove-vista-internet-security-2012 said to do. Then after when the virus was supposedly gone I could not connect to the internet so I did a Systems Restore. That fixed the internet problem. 2 days later the virus came back. And I did the same exact thing as last time. Then yesterday on the 23rd the virus came back for a third time.
I did everything that bleepingcomputer told me to do again. But this time when my computer restarted my internet connected fine.
Just now my computer contracted the virus for a fourth time. But when I used MBAM and scanned my computer this time it showed up that there wasn't any infections in my computer. Now, I'm worried. Every single time it seems easier for me to get my computer back to normal which makes me think that the virus is somehow still in computer, or why else would it come back every two days or so? Is there something I am doing wrong?

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft® Windows Vista™ Home Premium, 32 bit
Processor: Intel(R) Core(TM)2 Duo CPU T7250 @ 2.00GHz, x64 Family 6 Model 15 Stepping 13
Processor Count: 2
RAM: 2037 Mb
Graphics Card: Mobile Intel(R) 965 Express Chipset Family, 448 Mb
Hard Drives: C: Total - 230190 MB, Free - 101406 MB;
Motherboard: Sony Corporation, VAIO
Antivirus: Symantec Endpoint Protection, Updated: Yes, O... Read more

Read other answers
RELEVANCY SCORE 64.8

Hello!

A week or so ago I started receiving the popup messages that go along with the Vista Security 2012 virus. I downloaded Malwarebytes on to a USB drive and installed it on to my computer. At first the problem seemed to be taken care of, but over the next few days I developed new problems. I kept getting redirected from Google searches and anytime I try to run a virus scan, my computer went to blue screen and crashed. A friend directed me to RegZooka with SpyZooka, so I installed and ran those. Again, the problem seemed to go away. Last night, the Vista Security virus popups started again, and after running Malwarebytes again, I found this site. I ran FixNCR.reg, Rkill, Malwarebytes (again) and then ran the TDSSKiller (it didn't find anything.)

Today, after crashing three times in an hour and being redirected over and over, I ran the TDSSKiller again and this time it found something. I clicked on cure and was told that the computer needed to be rebooted, so I allowed that, but after two hours, it was still shutting down and then it crashed again.

I'm running Windows Vista Home Premium and using Firefox 8.0 as my browser. When the problem started I was on IMDB.com and prior to that I had been browsing at Amazon, my local property appraisers website, a local real estate website, twop.com, netflix, twitter and yahoo. At some point my Windows Security System has been turned off and it won't allow me to turn it back on.

Please let me know if ... Read more

A:Vista Home Security 2012 keeps coming back

Hello KatieBell

1.Download SpyBot-Search and Destroy http://download.cnet.com/Spybot-Search-Destroy/3000-8022_4-10122137.html
2.Enter Safe Mode on the computer. (Continuously press F8 when computer is booting up until you get the startup menu)
3.Run SpyBot-Search and Destroy and use it to scan.
4.When it finishes scanning, it should have detected it and be able to remove.
5.Restart Computer and start Windows normally.
Vista Home Security should have been successfully removed.

I hope this helped :D

Read other 1 answers
RELEVANCY SCORE 62.4

Surveys, blue links and Zone alarm I get a survey pop up on a large number of web pages saying something like " congratulations you have been chosen to participate in a survey for ....(the web page you are entering). Also on many sites such as Wikipedia, many Forms etc. there are a number of light blue or red double underlined common words that link you to some form of advertisement. I had tis problem years ago but can't remember how it was solved.
Also on IE Zone alarm has hijacked the home page. I have been able eliminate it from the search engines but not from the home page. Zone Alarm has not affected Firefox

.Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: AMD Athlon(tm) II X2 215 Processor, AMD64 Family 16 Model 6 Stepping 2
Processor Count: 2
RAM: 4094 Mb
Graphics Card: NVIDIA GeForce G210, 512 Mb
Hard Drives: C: Total - 350650 MB, Free - 242285 MB; D: Total - 350651 MB, Free - 350551 MB;
Motherboard: Acer, WMCP78M
Antivirus: Microsoft Security Essentials, Updated and Enabled

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:53:32 PM, on 6/20/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16611)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Win... Read more

A:Unwanted surveys, red & blue highlited links and Zone Alarm home page on IE

Read other 16 answers
RELEVANCY SCORE 60.8

my laptop keeps wanting to click back to my (Google) home page, even when I am offline in other programs besides for Internet Explorer, such as Windows Explorer or even Control Panel - all the icons are replaced by the Google homepage - which i wouldn't think was possible, especially when I'm offline and out of reach of any wireless connection...Logfile of HijackThis v1.99.1Scan saved at 2:00:56 PM, on 7/27/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeC:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exeC:\WINDOWS\system32\drivers\KodakCCS.exeC:\WINDOWS\system32\ScsiAccess.EXEC:\WINDOWS\system32\svchost.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\Program Files\Windows Defender... Read more

A:Keeps Going Back To My Home Page - Google

Hi and welcome to Bleeping Computer! My name is Sam and I will be helping you.
That doesn't sound like a symptom of malware, but let's see if we can figure it out. I'm not entirely sure I understand what you are seeing. Can you post a screenshot?

Read other 4 answers
RELEVANCY SCORE 60.8

Hi

something hidden in my computer causes my IE6 to have a specific home page. No matter how many times I change my home page back (I use google as my home page) this wierd home page, at: http://81.211.105.43/index.php?v=4 , keeps coming back whenever I reboot my system.

ad-aware failed to find this. I'm clueless now.
Any help please?

that wierd page (http://81.211.105.43/index.php?v=4) does not even exsist, and everytime it brings instead:
http://searchcentral.cc/

what can I do to get rid of them please and make IE keep google as my home page.

(btw: I'm not a newbie, and I know how to set a home page for IE)
 

A:cannot change back IE6 home page

Read other 12 answers
RELEVANCY SCORE 60

i can reset my home page to the default, however everytime i shut down the computer and restart it it, the homepage resets itself to aboutblank.com. I'm not very computer friendly, but any help would be appreciated. I am using winows 2000.

A:my home page keeps ressetting back to aboutblank.com

Hi,
With your browser open go to tools , internet options. In the address bar type whatever home page you want , then go to bottom and click "apply" ok and exit .. This should sort out the home page. If it does reset to blank post back and I will try another solution .

D.

Read other 12 answers
RELEVANCY SCORE 60

My parents are having trouble with their computer wherein while they are web browsing or composing an email, their browser (Internet Explorer) will go back to their homepage. I've remotely gotten into their computer using Teamviewer software and ran an Avira Scan and a Malwarebyte Antimalware scan. Those two scans produced PUP.MyWebSearch and also Trojan.FakeAlert.ASCGen. I deleted those and ran new scans and they didn't find anything again, although this problem is still happening. Does anyone have any ideas? Here are the requested scan logs...oops, except I see I forgot to save the "attach" file from DDS. I can get it and add it to the post soon....
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:25:38 PM, on 6/25/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\SYSTEM32\3cmlink.exe
C:\WINDOWS\SYSTEM32\3cshtdwn.exe
C:\WINDOWS\SYSTEM32\3cmlink.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Brownie\BrstsWnd.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe... Read more

A:IE spontaneously returns back to home page

Read other 16 answers
RELEVANCY SCORE 60

Had my Lotus Notes default Home Page removed by company MIS by mistake. Now I cannot get it back. Tried LN Help, but that was not helpful as they assume it is just hidden.
When on the LN Home page, on the top border is a link "Click here for home page options". But mine has been disabled/removed and now I do not have that link on my home page. I would like it back as it is very useful to me.

Any help is greatly appreciated. Thank you.
 

A:Lotus Notes - get Home Page back

I think you'll need to take it to company MIS. If they've set up a Group Policy restriction for changing the homepage, there's nothing we can do about it on this forum.
 

Read other 2 answers
RELEVANCY SCORE 60

A few weeks ago I started noticing that when I was clicking forward...let's say from a Google search, I would hear clicking going on behind the scenes without touching the mouse. It's been getting progressivley worse to the point where my computer will now just automatically bring me back to the home page and won't stay on any pages that I try to forward into for more than a second or two. Even when I'm in Outlook...it will jump from Inbox...to Outbox...to Junk E-Mail on it's own. At the same time this all started to happen, it seems like there is something running too long in the background...as I can't switch from one program to another without pressing CTL, ALT, DEL to unjam everything. I ran defrag, Adaware, and antivirus scans...but nothing helped.
Can anyone make any suggestions? Thanks...

A:My Computer Automatically goes back to home page

Hello & welcome to TSF


do this

do you have a Windows Xp cd, not the restore cd's that come with some systems, the cd will have the Windows logo & 3D hollowgram/image on it

if you do not maybe you can barrow one from a friend/family member/co-worker as long as it is the same version that is on your system

if you have (Windows XP Home Ed. sp2 ) then the cd will have to be that / if you have a cd with (Windows XP Home Ed. )you will have to slipstream (SP2 ) onto a disk that you create

this also applies to (Windows XP Professsional )
this also applies to (sp3 )

http://www.lancelhoff.com/how-to-sli...to-windows-xp/

now if you do have the Windows XP cd with sp2 please follow these steps as long as sp3 is not installed

--------------------------------------------

performing a (sfc) system file checker

It is a scan that checks the core files & dlls of the (os) operating system and replaces them if they are corrupt or missing with the correct original version

start

#1 then select (run) , then press enter
a window will open
#2 type in ( cmd ) then press enter
another window will open
#3 type in ( sfc )then press enter
another window will open
#4 type in (sfc /purgecache) then enter / your pc will work like crazy / this helps in rebuiding the cache file (notice the space between (sfc & /)
#5 type in (sfc /scannow ) then press enter ( notice the space between the (sfc & / )

now a scan will start , have y... Read more

Read other 2 answers
RELEVANCY SCORE 60

When I go to any site & click the home button, it shows an error message & I must exit MSN & log back in everytime. Does MSN need Quicktime to run? (it was recently deleted & immediately this started). Also, is it better to go to Firefox than to stay with IE? Thanks! NEVER MIND! IT CRASHED! THANKS ANYWAY.Edit: Moved topic from XP to the more appropriate forum. ~ Animal

Read other answers
RELEVANCY SCORE 59.2

Computer running Win 8.1.  Have run Malewarebytes, super anti spyware, avast anti virus, adaware, rkill, and hitman pro.  Mainly finding tracking cookies.  IE at times when I go to google from my home page type in a search it redirects me back to my home page instead of showing the search results.  At times it only takes a few keystrokes from typing - have to restart to get it to work again.  Runs very slowly. No errors that I can find but it will not behave correctly - please help.

A:At times cannot type, IE redirecting back to home page

Reset Internet Explorer.Download MIcrosoft FixIt file from here: http://go.microsoft.com/?linkid=9646978You can use ANY browser to download "FixIt" file.Double click on downloaded MicrosoftFixit50195.msi file to run the fix.Make sure you follow ALL steps listed there.Windows 8/8.1 users. Reset IE manually: https://support.microsoft.com/kb/923737?wa=wsignin1.0 

Read other 18 answers
RELEVANCY SCORE 59.2

Hi, I've recently been searching around the internet for some speed accelerators, etc., and tried a few. The next day I turned on my computer and my firefox loaded with a totally different webpage. This site called turbo-search101.com replaced my regular jpopasia.com/charts. So as anyone would do I'm sure, I opened up the options and changed it back. I clicked the home page button but the same page popped up! I checked my options again and it indeed said turbo-search101.com. So I tried it again. turbo-search101.com popped back up. I checked my antivirus and the "block any home page changes" was on, interestingly enough, the "alert me if an attempt is blocked" as also on. I uninstalled any software i might have downloaded but still came up with the same result.

Help please!
 

A:Firefox: home page changed and won't change back.

Read other 13 answers
RELEVANCY SCORE 59.2

Logfile of HijackThis v1.99.1
Scan saved at 9:31:06 PM, on 10/25/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\PROGRA~1\SPRINT~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Ares\Ares.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Digital Asphyxia... Read more

A:Help me get my home page back to normal....or please tell me what the heck is wrong

Read other 16 answers
RELEVANCY SCORE 59.2

The Firefox home page on my computer keeps switching back to flyingincognitosleep.com/cgi-bin/h.pl. This happens only to one of the two regularly-used users on the computer. The home page had been changed on IE8 also, but that could be reset manually. Both Firefox and IE were also re-configured to connect to the internet through a proxy server. This problem could also be fixed manually. The home page on Firefox keeps recurring, however. Malwarebytes has not been able to get rid of the issue.

Any and all help is appreciated. Logs below.

Thank you, and have a Happy New Year!

DDS (Ver_10-12-12.02) - NTFSx86
Run by Ton at 13:37:08.12 on Fri 12/31/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_22
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1022.437 [GMT -5:00]

AV: Symantec AntiVirus Corporate Edition *Enabled/Updated* {FB06448E-52B8-493A-90F3-E43226D3305C}

============== Running Processes ===============

C:\WINNT\system32\svchost -k DcomLaunch
svchost.exe
C:\WINNT\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSch... Read more

A:Firefox home page keeps switching back to flyingincognitosleep.com/cgi-bin/h.pl

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.In the custom scan box paste the following:

msconfig
safebootminimal
activex
drivers32
netsvcs
%SYSTEMDRIVE%\*.exe
/m... Read more

Read other 20 answers
RELEVANCY SCORE 58.8

I upgraded from Win 8.1 to Win 10. Ever since the home page on my IE11 keeps defaulting back to Yahoo Search. This is the URL:
http://search.yahoo.com/?fr=hp-ddc-bd&type=bl-bir-is-rhb-43__alt__ddc_dsssyc_bd_com

No matter what I do it keeps coming back after rebooting. Anybody know ho to get rid of this? I've gone into Internet options/Tools/General/Home page and the URL that shows up there is :

http://searchinterneat-a.akamaihd.n...VcFIk0FA1ADB0VXfVBdFElXTwhuIVdBM1wCVFlXM3FNAw==

Thanks
Tony D.
 

A:Internet home page keeps reverting back to Yahoo Search

Click on the Start button ? Settings ? System ? Apps & Features ? Look for anything similar to "searchinternet-aa-kama-ihd" and uninstall it.
After, click the Windows flag key + R and in the open run field type: inetcpl.cpl (Press enter)
Click on the Programs tab ? Manage Add-ons and look for anything related to "searchinternet-aa-kama-ihd", uninstall/remove...
Go back to the General tab and reset your home page. See if that helps any.
 

Read other 1 answers
RELEVANCY SCORE 58.8

I have read and initiated all of the suggestions in the sticky about secure websites on this forum.  When I'm at auduble.com and click the "sign in" link, the URL briefly changes to the sign in URL and then reverts back to the home page.  Strangely, this is the only site I have a problem with.  I am using Win 7, IE9, Norton Internet Security.  The problem started after I upgraded to IE10, although am not convinced that was the cause. I did a Reset on IE, then reverted back to IE9 and then IE8 with no luck, so upgraded to IE9 for now.  I have done complete scans with NIS, MalwareBytes, MalwaeBytes Anti-Rootkit, Super AntiSpyWare, Microsoft Malicious Removal Tool.  I have deleted all cookies, history, temps, MRUs, etc using CCleaner, Disk Cleanup, ATF Cleaner, and IE's browsing history delete.  I don't have this problem with Firefox or Chrome.  I am good at keeping a clean computer and frequently clean up other people's computers, but I have never seen this problem before.  Any suggestions?
 
thanks!

Read other answers
RELEVANCY SCORE 54.4

I've been having a a problem with the back left corner hinge since October of last year I poisted to another board about this problem hving been told that this issue would be passed onto support in my region. I'm currious as to weather I'll hear from these people in this lifetime or the next. I enjoy my Laptop and would like to continue using it but as time goes on it keeps seperating more and more and I have to snap it back into place to keep in together. I'm hoping to actually hear back from someone this time that will be able to help me in fixing this issue.

A:Back Corner coming from the back left side by the hinge

@jmb1313

 

I have brought your issue to the attention of an appropriate team within HP. They will likely request information from you in order to look up your case details or product serial number. Please look for a private message from an identified HP contact. Additionally, keep in mind not to publicly post personal information (serial numbers and case details).

If you are unfamiliar with how the Forum's private message capability works, you can learn about that here.

Thank you for visiting the HP Support Forum.

Read other 1 answers
RELEVANCY SCORE 52.8

I already posted in How to remove Windows 10 upgrade updates in Windows 7 and 8
In this thread after the starting post from Tookeri other updates that had to be deleted were mentioned. I made a list in post 841
I did not have all these updates on the pc but those that were on it I hid.
Some of them came back and I hid them again.
Now today they are back - with some that I had not seen before.

I made an attachment that shows them and also shows that I hid them again

Will I have to check Windows Update for the rest of my live?????

Read other answers
RELEVANCY SCORE 52.8

Logfile of HijackThis v1.99.1Scan saved at 12:25:44, on 08/08/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)(moderator edit: moved log to HJT forum for team analysis. jgweed)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exeC:\Program Files\Norton AntiVirus\navapsvc.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exeC:\WINDOWS\XPsys.exeC:\Program Files\Media Access\MediaAccK.exeC:\Program Files\Media Access\MediaAccess.exeC:\Saga\Super Popup Blocker\popkill.exeC:\WINDOWS\system32\ctfmon.exeC:\DOCUME~1\HERBER~1\LOCALS~1\Temp\A~NSISu_.exeC:\Program Files\Internet Explorer\iexplore.exeC:\DriverLoad\svchost.exeC:\WINDOWS\21438.exeC:\WINDOWS\91262.exeC:\DriverLoad\svchost.exeC:\DriverLoad\svchost.exeC:\DriverLoad ... Read more

A:HJT File (unwanted website keep coming)

Hello Johnc and welcome to the BC malware forum. After reviewing your log I see a few items that require our attention. Please print these directions and then proceed with the following steps in order.Step #1Download CCleaner and install it but do not run it yet.Remove these installed programs using Add or Remove Programs in the Control Panel:Click Start.Click Control Panel.Double-click Add or Remove Programs.Look in the Currently installed programs box for each program listed below and if it is there:Click on it to select it.Click Change (or Change/Remove) button.If you are prompted to confirm the removal of the program, click Yes.Super Popup BlockerImportantYour copy of HijackThis needs to be in a folder of it's own. If it is run from Temporary folders the backups and HijackThis itself could be accidentally deleted if the Temporary folders are cleaned. If it is run from the desktop then the backup files and folders can clutter up the desktop and be accidentally deleted. If it is run from inside a compressed file then the backups are not created at all.Please open My ComputerDouble-click on Local Disk (C:)Click on the File menu, point to New and then click on Folder. Name the folder 'HijackThis' or 'HJT'.Unzip to or copy and paste HijackThis.exe to the new folder (do not run HijackThis directly out of the sfx or compressed file).Step #2Start in Safe Mode Using the F8 method:Restart the computer.As soon as the BIOS is loaded begin tapping the F8 key until the boot menu appear... Read more

Read other 1 answers
RELEVANCY SCORE 52.4

Hello,
I have a problem ,which ive tried to fix serveral times but it keeps coming back.
This virus is located in Systems 32 folder, Pc Cilling 2005 identified it as TROJ_ROOTKIN.N . Ive gone
to safe mode, deleted it, returned to windows and the virus reapeared, wats more it clogs up Pc Cillin, so now under quarantine i have 100+ instances of this virus, and its increasing.
The virus is labelled hpr34k8

Im sure my Hijack Log is fairly clean... -------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 5:27:53 PM, on 14/08/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\RunDll32.exe
C:\WINDOWS\System32\RUNDLL32.EXE
C:\Program Files\Trend Micro\Internet Security 2005\pccguide.exe
C:\Program Files\Telstra\Cable Login\bpcable.exe
C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\Program Files\Telstra\Toolbar\bpumTray.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin... Read more

A:Virus that keeps coming back and back and back, so on

bump, hopefully someone takes notice

Read other 19 answers