IE Nusience.

[JohnStep]

Somewhere I have cought a little bug that keeps changing my Homepage to "Search.cc". As soon as it changes it to that addy, I will change it back to my perfered homepage. Within the day it will try to change it back to "Search.cc". It has done this for several days now. Me change, it changing it back. I have looked Hi and Low for the culpret and cannot seem to find it.

I have: Cleared the Cookie file
Cleared the Cache
Looked through Task Manager for something strange
Looked through MSConfig for setting changes.

I cannot find anything out of the ordinary. Any Ideas how I can remedy this problem??

John Stephens
Thanks in advance!

 

[smah]

Try faq608-3482 & faq608-4650

 

[JohnStep]

Thanks for the reply. I don't know why I did'nt think of spyware eariler. So I D/L Ad-Aware and ran it. No Go it still changes my homepage. This one has got me thinking. I feel its an Exe somewhere I just cannot find it.

 

[carrr]

If you've already run out the avenues enumerated in the FAQ's (it sounds like you've only run AdAware)...then download and run Hijack This!

http://mjc1.com/mirror/hjt/

Scan your pc and post the log here for clean-up advice.


"'Tis an ill wind that blows no minds." - Malaclypse the Younger

 

[Wxguesser]

This sounds like it is similar to the find4u hijack. The solution for that was to do a search for winlogon.exe and to delete any copies of this file that are NOT in windows/system32 and to then delete any registry keys pointing to Search.cc I'd also run Spy-bot as well as it may detect any related malware that the manual deletions may miss. This worked to get rid of find4u from a friends machine.

Jim W.

 

[battmain]

Your browser has been hijacked. This stuff is relatively new and a RPITA to get rid off. I talk to pc techs that don't have a clue about hijacking. Adaware and spybot will not detect some of these because they masquerade as helpful utilities on the pc. Do a search on the specific name of the search engine and you might be able to find some info on it. Disable all activex and downloading and scripting/java before visiting any site, as the hijack may be hiding in some the sites that you visit. Best hijack I've seen so far is munky.com. It actually blocks google!

 

[Wxguesser]

If this is still a valid issue, you may want to try the following thread:

thread779-728835

as it deals with IE hijackers (find4u in particular but it may apply to you as well). They are a RPITA to get rid of.

Jim W.

 

[carrr]

On that note, this might be more to the point:
thread615-718226

"'Tis an ill wind that blows no minds." - Malaclypse the Younger