Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Jan 8th, 2009, 11:41am
   Mischel Internet Security Forum
   Malware
   Trojans (Moderators: Helena, Gavin_Coe, Magnus)
   Changing my IE6 default home page		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: Changing my IE6 default home page  (Read 2159 times)
JackConner
Newbie
*



I love retirement

   


Gender: male
 Posts: 1
Changing my IE6 default home page
« on: Dec 4th, 2003, 11:52pm »		 Quote Quote  Modify Modify
I am running IE6 with XP Pro. and began encountering my default home page changing almost daily to www.cool-search.net.  My suspicion is that I have a Trojan horse somewhere, but so far have not found the source of the change.  There are no other identification markings on this "search engine" page.  However, out of curosity, I connected to www.cool-search.COM and it comes up as Lavasoft's AD-Aware site.  I used to have AD-Aware but it is no longer installed (I think).  Any suggestions would be appreciated.
 
TIA
Jack Conner - Atlanta Ga.
IP Logged
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4121
Re: Changing my IE6 default home page
« Reply #1 on: Dec 4th, 2003, 11:55pm »		 Quote Quote  Modify Modify
This is an Internet Explorer toolbar addon that hijacks your home page. Try a run with either Spybot S&D or Ad-aware to get rid of it:
 
  Spybot S&D: http://www.safer-networking.org/
 
  Ad-aware: http://www.lavasoftusa.com/
IP Logged
David
 Guest

Email
Re: Changing my IE6 default home page
« Reply #2 on: Dec 12th, 2003, 5:38am »		 Quote Quote  Modify Modify   Remove Remove
do search for sys.reg probably in c:\windows\sys.reg
 
REGEDIT4
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"HOMEOldSP"="http://www.google.com"
"Search Bar"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"HOMEOldSP"="http://www.google.com"
"Search Bar"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"sys"="regedit -s sys.reg"
 
Just do a search and replace between the quotes for the site you want as your home page.
 
You should be good to go..At least the next time they try and put a sys.reg you will already have it and they may leave you alone...
IP Logged
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register