Topic: Home page Hijacked!

[TOFFEEMAN1878]

A friend of mine (in this case it is not me)  has had his homepage hijacked ,I know there is a way to fix this through the registery but I cant remember ,can anyone help ?......Jim

[Clive]

A good start is to download and run AD-AWARE

and then SPYBOT SD

If it's still there after that come back and let us know.

[Scotty_CFC]

I don't know if its the way you're talking about, but I fixed my hijack by editing the following iereset file with notpad. C:\windows\inf\iereset.inf

[TOFFEEMAN1878]

It was something like :   Current User > Sofyware>Mircosoft >Windows>Run
then after that I can't remember !!!
                         :x  :x  :x  :x

[Sandra]

Does resetting it in Tools/Inernet Options not work ?

CWS Shredder is quite good at removing the cool web home page hijacker, if not.

[Clive]

Resetting it in Tools/Inernet Options usually only works until the next reboot.  CW Shredder is a good idea but also try http://www.x-raypc.com/
which is a registry scanner that will alert you to malware and help to remove it.  If that doesn't work then there are other options available.

[Hiatus]

HijackThis usually works quite well for those kinds of things...It lists all the current programs/registry values running, you can then select individual parts and delete them. You can also save a log and post it here if need be.

There should be a section like this:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mdg.ca
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.google.ca/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Sympatico

Which is where the problem will most likely be...

[TOFFEEMAN1878]

Hiatus,Thanks for the info........Jim