Fly Away Simulation
SearchSearch 

Homepage Hijacked

ohio simmer Guest

Some stupid search site, took over my IE homepage, and so far I haven't been able to set it the way it used to be, or every time I set it back to flyaway as my home page it keeps changing it.......

PLEASE HELP

I am so frustrated

Pro Member First Officer
PH First Officer

Try doing a spyware type scan.. sorry I have no links but watch this thread as I am sure someone will be able to assist.

Pro Member Chief Captain
Chris102 Chief Captain
ohio simmer Guest

I tried adaware 6 already it just did not work........

Pro Member Chief Captain
Alex (Fire_Emblem_Master) Chief Captain

http://www.mcafee.com/us/

i THINK they offer a free trial of the virusscan, if not, buy it when you get a chance, its the best i've ever used.

Pro Member Chief Captain
RadarMan Chief Captain

Try this. the only other way out is to do a clean install.
You have to have a firewall and an anti virus if you are going to connect to the net now-a-days.

http://www.spychecker.com/program/hijackthis.html

Radar

Pro Member Trainee
Ohiosimmer Trainee

still did not work...........I wish I knew a way of finding out who are those people behind all this shit........

Pro Member Chief Captain
Chris102 Chief Captain

Try Spybot Search and Destroy - It works pretty good.

http://www.safer-networking.org/en/index.html

Pro Member Trainee
Ohiosimmer Trainee

Thanks Chris, but i tried that already........

Pro Member Chief Captain
RadarMan Chief Captain

If what I told you to do hasn't worked then your last chance before a clean install is to go to them for help.

Radar

Pro Member First Officer
mako (makonnenl) First Officer

Got to http://www.lavasoft.com/ and download ad-aware.
This software is free so take advantage of it.
The Internet Explorer has so many holes that need to get fixed.
Also you have an option to use other browser e.g. Netscape.....

I hope this will help.
. 😉 😉

Pro Member Chief Captain
Chris102 Chief Captain

makonnenl wrote:

Got to http://www.lavasoft.com/ and download ad-aware.
This software is free so take advantage of it.
The Internet Explorer has so many holes that need to get fixed.
Also you have an option to use other browser e.g. Netscape.....

I hope this will help.
. 😉 😉

He already tried that 🙄

Pro Member Trainee
Ohiosimmer Trainee

Thank you all..........

I guess I will have to reinstall..........

Pro Member Chief Captain
RadarMan Chief Captain

Ohiosimmer wrote:

Thank you all..........

I guess I will have to reinstall..........

👍 Good luck and don't connect to the net until you have your anti virus and firewall set up.

Radar

Pro Member Captain
John Hodges (originalgrunge) Captain

Woah woah! don't re-install yet! You guys havn't reccomended Hijackthis yet. It's a program that looks at EVERYTHING on your system, not just what spyware removers do! Spyware removers can't touch half of the stuff that hijackthis works with. The only trouble is interpreting the log or scan that it gives you. If you need help, simply email me the log (banquo100@yahoo.com), and i'll help sort through it to find the troublesome program!

Pro Member Trainee
Ohiosimmer Trainee

thanks original, but where can I find "hijackthis"?

Pro Member Chief Captain
Chris102 Chief Captain

You can get it at http://www.spychecker.com/program/hijackthis.html

Unfortunately, I'm having the same problem you're having, and I tried Hijack This. It didn't fix my problem, but it's worth a try!!

Pro Member Chief Captain
tomthetank Chief Captain

How you tried Google
Enter the name of the site that you are being sent to and you should get results with explanations of how to remove the offending link from your PC

www.google.com

you may find that you will have to edit your registry files,just follow the instructions VERY carefully

Pro Member Trainee
Ohiosimmer Trainee

TTT,

I wish I can find out the name of the site, its anonymous, and when you look at the address bar all it says is a:about blank

Guest

😕 Are you being directed to a site ? Or are you getting the site unavailable page?

Pro Member Chief Captain
tomthetank Chief Captain

Have a read of these The top one and then the ones on the right hand side ➡

http://www.google.co.uk/search?sourceid=navclient&ie=UTF-8&q=%3Aabout+blank

Let us know

Pro Member Trainee
Ohiosimmer Trainee

TTT, My home page is set to a search site, and thats all.....and then I get all these pop ups from the same place to buy anti hijacking software......you know it looks, smells, and acts as a scam........and as i said that search site has nothing on it to identify the owner/owners of it.........

Pro Member Chief Captain
tomthetank Chief Captain

😳 Looks like its CWS Coolwebsearch and CWShredder will get shot of it ➡

http://www.majorgeeks.com/download4086.html

Found this aswell ➡

http://www.techspot.com/vb/topic17297.html

Let us know

Pro Member Trainee
Ohiosimmer Trainee

thanks TTT

It just won't work..........

I just about tried everything, other than a reinstall......

can you tell me how can I delete my IE and down load a new copy of it....

help will be appreciated

Pro Member Chief Captain
tomthetank Chief Captain

Crying or Very sad I dont think you can uninstall just IE
Have a read/try of this and give me an hour or so and Ill come back to you

Pro Member Chief Captain
RadarMan Chief Captain

Not to bypass TTT but I heard of this site before.
Good luck, the US GOV tried to get them to remove it.

http://support.microsoft.com/kb/318378/EN-US/

I don't think that will solve your problem, you have to get rid of the nasty bugs.

Radar

Pro Member Chief Captain
tomthetank Chief Captain

😀 Hey Radar with info like that,you join in whenever 👍
So you can reinstall or repair IE 😀
That would be my 1st option(but Im worried that it may not fix this problem as this search page has altered the registry)But still worth a go as the reinstall/repair may overwrite the regestry

If it did'nt work then....................... ➡

The other thing I would try is regedit(click sart run and type regedit)
And open HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search,CustomizeSearch
and see if About Blank is there (if so delete it)

then

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL

HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch

HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP

WARNINGThis is not without risk,only delete if you see the about blank

There are Microsoft Internet Explorer enteries in the LOCAL MACHINE set aswell

HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch

HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch

Take your time and go through them slowly(just the Microsoft internet ones)

Note I have taken these regestry lines from a forum where they were infected with the same about blank hijack(not only one but several forums and the info is always the same

As I have said this is not without some risk,but you were looking at a total reformat and reinstall yesterday and this may save you the hassle of that

Good luck

Keep us posted(and fingers crossed)

Pro Member Trainee
Ohiosimmer Trainee

Thank you TTT and Radarman.....

I found the about blank and deleted it, but still.......the same problem...
I actually found two of the about blank in there, and deleted both.....I am gonna try the sites radarman posted before I have to reinstall...

Pro Member Chief Captain
tomthetank Chief Captain

[size=24]WARNING[/size]

While researching this I have picked up an extra toolbar and my homepage was a sex search site Surprised Embarassed
My firewall was set to bullet proof Wall Bashing but somehow it got in

A toolbar was added to my program list(ActiveX popup I suspect)and I think I know where it came from.
However it had an entry in my add/remove progs list and removing has got shot of it(phew)

I think it was a link from this page that done it so be Very carefull ➡

http://aumha.org/a/parasite.htm

Just goes to show how easy it is to pick up something nasty Horse
Now running all my spyware progs then Ill reboot and make sure everything is OK

Pro Member Trainee
Ohiosimmer Trainee

after i do the run regedit,

yoy said to delete that about blank......

well I did that, but later you said then .......etc what do I do with all these other files names?

Thanks

Pro Member Trainee
Ohiosimmer Trainee

The site that had taken over my home page is called rb37.com , does that ring a bell to anyone?

Pro Member Chief Captain
tomthetank Chief Captain

Im clean 😀

What other file names

Guest

Mad Google just gives a link direct to the rb37.com site (and Im not going there)
Ill check a few forums

Guest

Try this online scan ➡

http://www.pandasecurity.com/uk/

Or try this ➡

None of the forums know of rb37.com ...........Yet

❓ ❓ ❓ Quote

after i do the run regedit,

yoy said to delete that about blank......

well I did that, but later you said then .......etc what do I do with all these other files names?

What other file names??

All times are GMT Page 1 of 1

Related Questions