homepage of IE - Techist - Tech Forum

Go Back   Techist - Tech Forum > Computer Software > Microsoft Windows and Software
Click Here to Login
Closed Thread
 
Thread Tools Display Modes
 
Old 03-28-2004, 06:26 AM   #1 (permalink)
True Techie
 
Join Date: Oct 2003
Posts: 148
Default homepage of IE

Everytime I open IE, my homepage always is hot-search.com. I have changed it to blank. But next time I open IE, it still appears. And I have tried to edit registry but it's no use. I don't remember whether I have read the same problem on this forum or not. Any ideas? I appreciate it very much.
__________________

__________________
Happy to help or to be helped :)
Traudong is offline  
Old 03-28-2004, 11:58 AM   #2 (permalink)
Monster Techie
 
Join Date: Jul 2003
Posts: 1,179
Send a message via AIM to Emily
Default

Have you run an Ad-Aware or Spybot scan?
__________________

__________________
www.upstark.com
Emily is offline  
Old 03-28-2004, 01:14 PM   #3 (permalink)
Ultra Techie
 
Join Date: May 2003
Posts: 548
Send a message via AIM to aye29 Send a message via Yahoo to aye29
Default

Yes run Ad-Aware and Spybot. Run an anti-virus program also since some viruses will change your homepage.
aye29 is offline  
Old 03-28-2004, 01:40 PM   #4 (permalink)
True Techie
 
Join Date: Oct 2003
Posts: 148
Default

I have run Ad-ware and found nothing. I will run anti-virus software but it will take me some time.
__________________
Happy to help or to be helped :)
Traudong is offline  
Old 03-29-2004, 01:34 AM   #5 (permalink)
True Techie
 
Join Date: Oct 2003
Posts: 148
Default

I'm using Norton. I have scanned my hard disk by Norton anti-virus but it found nothing. And I have found that my comp have a Trojan horse (it was blocked when it tried to send infor out). But I don't know why Norton anti- virus can't find it. So, I will try Hijackthis. Thanks everyone.
__________________
Happy to help or to be helped :)
Traudong is offline  
Old 03-29-2004, 01:48 AM   #6 (permalink)
Newb Techie
 
Join Date: Aug 2003
Posts: 14
Send a message via Yahoo to deolya
Default

Try updateing your Anti-virus software... it could be outdated...
if your looking for a second opinoin check out http://housecall.trendmicro.com/ where you can scan your computer via a remote server for free
deolya is offline  
Old 03-29-2004, 06:51 AM   #7 (permalink)
Super Techie
 
Join Date: Nov 2003
Posts: 415
Default

if u could post ur hijackthis log it would b very helpful
__________________
Fear is nothing but the anticipation of pain, be it physical, mental, spiritual or emotional.
specs.
Athlon XP 2200+ oc\'ed @ 1.93ghz
MSI ms-6738
768mb ddr2100
Nvidia mx420 :(
60gig maxtor 7200rpm
Dual boot with Mandrake 10.0 and Win XP Pro sp2
neversleeps is offline  
Old 03-29-2004, 11:50 AM   #8 (permalink)
True Techie
 
Join Date: Oct 2003
Posts: 148
Default

Here it is:

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://awebfind.biz/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://hot-searches.com/search.php?v=6&aff=2743809
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://hot-searches.com/index.php?v=6&aff=2743809
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://hot-searches.com/index.php?v=6&aff=2743809
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *hot-searches.com*;*lender-search.com*
O1 - Hosts file is located at: E:\WINDOWS\nsdb\hosts
O1 - Hosts: 81.211.105.69 lender-search.com
O1 - Hosts: 81.211.105.68 hot-searches.com
O2 - BHO: (no name) - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - E:\Program Files\DAP\DAPBHO.dll
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - E:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_12_0. dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - E:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_12_0. dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - E:\PROGRA~1\DAP\dapiebar.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [D-Link AirPro Utility] E:\Program Files\D-Link\AirPro Utility\WLANmon.exe
O4 - HKLM\..\Run: [BJCFD] E:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [NAV Agent] E:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [iamapp] E:\Program Files\Norton Personal Firewall\IAMAPP.EXE
O4 - HKLM\..\Run: [Mirabilis ICQ] E:\PROGRA~1\ICQ\ICQNet.exe
O4 - HKLM\..\Run: [Virtual Drive] "E:\Program Files\FarStone\VirtualDrive\vdtask.exe"
O4 - HKLM\..\Run: [RealTray] E:\Program Files\K-Lite Codec Pack\Media Player Classic\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] E:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: mtdEVAShelf 300.lnk = E:\Program Files\MTD300\QSHLFMTD.EXE
O8 - Extra context menu item: &Download with &DAP - E:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - E:\PROGRA~1\DAP\dapextie2.htm
O8 - Extra context menu item: Yahoo! Dictionary - file:///E:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! Search - file:///E:\Program Files\Yahoo!\Common/ycsrch.htm
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: ICQ Pro (HKLM)
O9 - Extra 'Tools' menuitem: ICQ (HKLM)
O9 - Extra button: Run DAP (HKLM)
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache...tup1.0.0.6.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst0401.cab
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/downlo...22/wmv9VCM.CAB
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://us.dl1.yimg.com/download.yaho...ymmapi_416.dll
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab
__________________
Happy to help or to be helped :)
Traudong is offline  
Old 03-30-2004, 05:02 AM   #9 (permalink)
Super Techie
 
Join Date: Nov 2003
Posts: 415
Default

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://awebfind.biz/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://hot-searches.com/search.php?v=6&aff=2743809
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://hot-searches.com/index.php?v=6&aff=2743809
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://hot-searches.com/index.php?v=6&aff=2743809
O4 - Global Startup: mtdEVAShelf 300.lnk = E:\Program Files\MTD300\QSHLFMTD.EXE
O8 - Extra context menu item: &Download with &DAP - E:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - E:\PROGRA~1\DAP\dapextie2.htm
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocach...etup1.0.0.6.cab
O1 - Hosts: 81.211.105.69 lender-search.com
O1 - Hosts: 81.211.105.68 hot-searches.com
O2 - BHO: (no name) - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - E:\Program Files\DAP\DAPBHO.dll
O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - E:\PROGRA~1\DAP\dapiebar.dll

i would check all of these in hijackthis and have it fix them, make sure all browser windows are closed first, also here is a link to the manual removal of download accelerator plus (DAP)
http://www.pestpatrol.com/pestinfo/d...rator_plus.asp


and what is this, O4 - Global Startup: mtdEVAShelf 300.lnk = E:\Program Files\MTD300\QSHLFMTD.EXE, anything that creates a random name for the .exe of the program cant b good. well as far as i kno its random i didnt find anything on the net with that filename, if its a program that is good and u know about then dont delete it

and i cant believe adaware and spybot are coming up clean, do u have the latest updates and reference files for it, maybe it doesnt qualify for ad/spyware

hope that helps
__________________
Fear is nothing but the anticipation of pain, be it physical, mental, spiritual or emotional.
specs.
Athlon XP 2200+ oc\'ed @ 1.93ghz
MSI ms-6738
768mb ddr2100
Nvidia mx420 :(
60gig maxtor 7200rpm
Dual boot with Mandrake 10.0 and Win XP Pro sp2
neversleeps is offline  
Old 03-30-2004, 07:10 AM   #10 (permalink)
True Techie
 
Join Date: Oct 2003
Posts: 148
Default

Awebfind and hot-searches really annoy me. mtdEVA is my dictionary so it's harmless. Thank you very much . And I think I don't need to delete DAP, do I? It's a very good download program.
__________________

__________________
Happy to help or to be helped :)
Traudong is offline  
Closed Thread

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off




Copyright 2002- Social Knowledge, LLC All Rights Reserved.

All times are GMT -5. The time now is 10:21 AM.


Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2017, vBulletin Solutions, Inc.