Crosswords2 mins ago
More homepage problems
3 Answers
Hi, I've asked this question a coupe of times, but I'm still having no luck. My homepage keeps on getting set to a string on numbers, which on starting IE5.5 turns out to be Globalfinder.com. I am running Win95.
So far, neither AVG antivirus, ad-aware or sybot can see any problem. When I have attempted to follow advice in the registry, I have noticed that the HKEY CURR USER\Software\Policies\Microsoft\InternetExplorer\ControlPanel value for the homepage is 0x00000000 (0). There is another directory in INTERNETEXPLORER in this part of the registry, branching into INFODELIVERY\COMPLETEDMODIFICATIONS. Here there is a value called TBC6... with data 0x01bef183 (29290883). Should this be here?
The other ideas posted for registry values do not seem to exist - that is policies in LOCAL MACHINE and restrictions in Internet Explorer in CURRENT USER. I was wondering, am I infected with a virus or a worm? When I have tried to manually change the default and start pages in INTERNETEXPLORER\MAIN in the registry, it always changes them back to the string of numbers for globalfinder.com. It only does this, it seems, when I have switched the computer off at the wall.
Answers
Best Answer
No best answer has yet been selected by map08. Once a best answer has been selected, it will be shown here.
For more on marking an answer as the "Best Answer", please visit our FAQ.Sounds like you got quite a struggle there map08;
found 'homepage hijacking' info below; read the whole page, remember to backup your registry b4 tweaking :-)
>>>clip]; Delete the entry (with bootconf.exe) in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run also >>> from http://www.experts-exchange.com/Web/Browser_Issues
/Q_20685695.html good luck.
/Q_20685695.html good luck.
Hello, I finally found out what was wrong: Cool Web hijacker! If any one else is having this problem, may I reccomend pointing your browser to http://www.computing.net/security/wwwboard/forum/6
234.html and: http://www.spywareinfo.com/~merijn/cwschronicles.html This nifty package removes the problem!
234.html and: http://www.spywareinfo.com/~merijn/cwschronicles.html This nifty package removes the problem!