Home page has been hijacked


  #1  
Old 04-09-04, 07:19 PM
M
Member
Thread Starter
Join Date: Mar 2001
Posts: 34
Received 0 Votes on 0 Posts
Home page has been hijacked

My home page has been hijacked by a page called best-search.info/1515. Actually, when I first log on the internet, the first page it goes to is http://*****.***/1525, then it goes to http://******.***/1515.

I have run Adaware, spybot, and Norton AV 2003, no luck. All programs have latest updates as of 4/9/04. Even when I go into Tools, internet options and try to set yahoo.com as default it will not take it. Any suggestions? I am running XP Home

At the bottom of the best-search.info home page their is a link to remove the page but it involves going into the registery and deleting several files. The text is below.

If you don't want to continue using smart-finder, follow instruction below:
Click "Start" -> "Run"
Type "regedit" and click OK.
In navigation tree go to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SharedTaskScheduler
Then delete all keys at the right panel (just click on it and press Delete key)
Then go to HKEY_CURRENT_USER\software\classes\CLSID\{3F143C3A-1457-6CCA-0A7-7AA23B61E40F} and delete all keys too.
Restart your PC.
Go to C:\WINDOWS\system32\ folder.
Find file mtwirl32.dll and delete it.

I don't trust this solution seeing it is offered by a site that is malicious to begin with.

Any help would be appreciated.

Thanks
 

Last edited by SafeWatch; 04-09-04 at 08:30 PM.
  #2  
Old 04-09-04, 07:57 PM
superbovine
Visiting Guest
Posts: n/a
make sure you updated your spyware and virus scanner.

my browser was hijacked the other day and ad-aware couldn't remove it, but spybot could. make sure you update.

http://download.com.com/3000-8022-10...ml?tag=lst-0-2

if that doesn't work read this article.

http://www.techtv.com/callforhelp/fr...486293,00.html
 
  #3  
Old 04-09-04, 08:30 PM
WorldBuilder's Avatar
Banned. Rule And/Or Policy Violation
Join Date: Mar 2004
Location: Boston, MA
Posts: 1,471
Received 0 Votes on 0 Posts
You can also try a program called "HijackThis" which I recently discovered. It tends to remove what spybot and adaware can't. Google for it, and you'll find it. Very small download, and nothing more than a simple executable file. No actual program to install. Very cool stuff.

Chris
 
  #4  
Old 04-09-04, 10:08 PM
S
Member
Join Date: Mar 2004
Location: NY
Posts: 108
Received 0 Votes on 0 Posts
Another great proggie to protect against spyware and malicious sites is:

http://www.javacoolsoftware.com/
 
  #5  
Old 04-09-04, 10:41 PM
tae's Avatar
tae
tae is offline
Member
Join Date: Nov 2002
Posts: 2,467
Received 0 Votes on 0 Posts
hijackthis main page:
http://tomcoyote.com/hjt/

Quick tutorial on how to use it.
http://www.spywareinfo.com/articles/hijacked/
 
  #6  
Old 04-09-04, 10:47 PM
Pendragon's Avatar
Member
Join Date: Jul 2002
Location: USA
Posts: 1,851
Received 2 Votes on 2 Posts
It's sounds to me like your home page has been changed.
Easy enough to fix, no software required.
Just load IE, go to tools > options and the first entry is your homepage address. Just click 'use blank' and it's done.
 
  #7  
Old 04-09-04, 11:04 PM
M
Member
Thread Starter
Join Date: Mar 2001
Posts: 34
Received 0 Votes on 0 Posts
Thank you all for your suggestions. I will Try them tomorrow. This is a nasty program. It will not allow me to open certain sites like Yahoo or Goggle. It even prevented me form trying to download a free trojan remover program. Thank you for your input.
 
  #8  
Old 04-10-04, 05:58 AM
WorldBuilder's Avatar
Banned. Rule And/Or Policy Violation
Join Date: Mar 2004
Location: Boston, MA
Posts: 1,471
Received 0 Votes on 0 Posts
Let us know how it works out. We'll be here!
 
  #9  
Old 04-11-04, 01:59 PM
M
Member
Thread Starter
Join Date: Mar 2001
Posts: 34
Received 0 Votes on 0 Posts
Just a quick update on my hijacking problem. First, thank you all who responed, I appreciate each and every suggestion offered. I ended up downloading HijackThis, reading the supplied link to the tutorial, visiting their forum page and studing the suggestions given to several other people with the exact same problem. Well, it seems to have been sucessful, I have control over my computer again and am taking steps to find a program that will allow me lock out any attempts to change my home page settings. Again, thank you all for your helpl

Robert
 
  #10  
Old 04-11-04, 04:45 PM
WorldBuilder's Avatar
Banned. Rule And/Or Policy Violation
Join Date: Mar 2004
Location: Boston, MA
Posts: 1,471
Received 0 Votes on 0 Posts
Good job!

You're welcome!

Stop in and see us again sometime!

Chris
 
 

Thread Tools
Search this Thread
 
Ask a Question
Question Title:
Description:
Your question will be posted in: