 |
| Register | Login | |||||
 |
Main
| Memberlist
| Active users
| ACS
| Commons
| Calendar
| Online users Ranks | FAQ | Color Chart | Photo album | IRC Chat |
|
| | ||
|
| Register | Login | |||||
|
Main
| Memberlist
| Active users
| ACS
| Commons
| Calendar
| Online users Ranks | FAQ | Color Chart | Photo album | IRC Chat |
|
| | ||
| 0 user currently in Hardware/Software. |
| Acmlm's Board - I2 Archive - Hardware/Software - Help! IE homepage = WTF? |
 |  |  |
| Add to favorites | "RSS" Feed | Next newer thread | Next older thread |
| User | Post | ||
theclaw Red Cheep-cheep Level: 24  Posts: 82/202 EXP: 69367 For next: 8758 Since: 03-28-04 From: USA Since last post: 21 hours Last activity: 7 min. |
| ||
| Now this has got to be the strangest web browser-related problem I've ever seen. Here's a screenshot. http://img18.photobucket.com/albums/v54/theclaw/iehomewtf.jpg It keeps resetting back to the above page no matter what's done. Don't go telling me to switch browsers, Firefox, Opera and a few others are installed on my computer. Scans with Spybot S&D, Norton Antivirus, and Ad-Aware reveal nothing. Windows is fully up-to-date with all it's service packs, etc. The problem started just an hour or 2 ago. Any idea on how to get rid of this bizarre issue? My next step is to try a firewall, unless WINXPPRO (what a nickname!) has one built-in. FYI: this post is from Firefox. |
|||
mvpo.geo Red Goomba Level: 13 Posts: 37/48 EXP: 8041 For next: 2226 Since: 03-27-04 From: Delaware :( Since last post: 229 days Last activity: 225 days |
| ||
| Looks like you have some sort of hack into your comp. Its a registery key, just delete your home page registery key and it should stop the problem. If it doesn't then, ummmmm did you try to just go to internet options? | |||
Emptyeye Real American Level: 67 Posts: 258/2273 EXP: 2488421 For next: 104451 Since: 05-24-04 From: I DUNNOOOOOOOO!! Since last post: 9 hours Last activity: 4 hours |
| ||
| I presume your anti-spyware software is also up to date? Hmm. I suppose the next step would be to get HijackThis! and see if it finds anything unusual. |
|||
|
theclaw Red Cheep-cheep Level: 24 Posts: 83/202 EXP: 69367 For next: 8758 Since: 03-28-04 From: USA Since last post: 21 hours Last activity: 7 min. |
| ||
| Thanks! I guess the most popular programs can't track everything. On second thought, it seems to come back after a while. Doesn't anybody recognize that page? There's got to be a permanent solution. (edited by theclaw on 06-19-04 10:26 AM) |
|||
|
HyperLamer <||bass> and this was the soloution i thought of that was guarinteed to piss off the greatest amount of people Sesshomaru Tamaranian Level: 118 Posts: 1057/8210 EXP: 18171887 For next: 211027 Since: 03-15-04 From: Canada, w00t! LOL FAD Since last post: 2 hours Last activity: 2 hours |
| ||
Well, that's officially the weirdest ad I have ever seen.  Does the URL bar actually say 'about:blank'? It could be using the non-printable character trick; look through the registry and HD for anything containing that, a strange ASCII character, an @ sign, and a URL of some sort. (Basically, in some cases it's possible to go to a site like www.site1.com[non-printable character]@www.site2.com, the URL bar will say www.site1.com but you'll be at www.site2.com instead.) |
|||
goodall Double hammer Level: 11  Posts: 21/38 EXP: 5405 For next: 580 Since: 05-19-04 From: the UK Since last post: 189 days Last activity: 194 days |
| ||
| my browser does this alot, it seems to be as a result of spyware, i have no idea how to edit reg keys, is there another option? | |||
Spyware Goomba Level: 9  Posts: 14/26 EXP: 3152 For next: 10 Since: 04-16-04 From: MI Since last post: 407 days Last activity: 298 days |
| ||
| Blah this did happen to me a lot. its a brower hijack of somesort. The best way I found to get rid of it is download a program called AD-AWARE from lavasoft. its way better than spybot, and spyware blaster. Just run it it will find it delet it and all should be fine. If you dont know the lavasoft site you can find the download Here in this thred (edited by Spyware on 06-20-04 01:25 AM) |
|||
Sokarhacd Ball and Chain Trooper Resistance is Futile You Will Be Assimilated Hab SoSlI' Quch Level: 61  Posts: 292/1757 EXP: 1799888 For next: 76708 Since: 03-15-04 Since last post: 6 days Last activity: 4 hours |
| ||
| thats exactly what happened to me, I keep getting rid of it, and it comes back, as different things, hijackthis recognizes it, but it wont go away, or atleast not for very long, and adaware doesnt find it, neither does spybot... | |||
|
Emptyeye Real American Level: 67 Posts: 283/2273 EXP: 2488421 For next: 104451 Since: 05-24-04 From: I DUNNOOOOOOOO!! Since last post: 9 hours Last activity: 4 hours |
| ||
| Chaosflare: That's because, last I knew, HijackThis did nothing to actually remove stuff unless you told it to (I know the other programs are like this too, but HijackThis is a little more crude in that there's no "delete everything found" option). I'd recommend going to The Computer Cops board and showing them your HijackThis log, and see what they have to say about it. |
|||
Keitaro Iron Knuckle ウラシマ ケイタロウ Level: 54 Posts: 471/1342 EXP: 1201569 For next: 32301 Since: 03-15-04 From: Hinata, Japan Since last post: 2 days Last activity: 2 days |
| ||
this is the EXACT problem I have. and it keeps coming back  seriously. there needs to be a permanent solution |
|||
Wyv Shyguy Level: 16 Posts: 66/87 EXP: 18530 For next: 1726 Since: 05-30-04 Since last post: 467 days Last activity: 339 days |
| ||
| I just got rid of it on my Dad's computer. The Spyware that causes this problem is called CoolWebSearch. There's actually a utility designed to get rid of only CWS hijackings. It's listed below. First, go to the Windows Update site and download the latest patches. Second, go to Google and search for CWShredder. Download it. Third, run the above program. Close all browser windows. Choose the update option first, then the fix option. Fourth, empty your recycling bin. That's where CWShredder puts deleted crap. Fifth, run IE. If the problem persists, repeat steps 3 and 4. Sixth, if it still happens, I don't know what to tell you. It seemed to fix my Dad's laptop. (edited by Wyv on 06-22-04 03:05 PM) |
|||
Kitten Yiffer Purple wand Furry moderator Vivent l'exp����¯�¿�½������©rience de signalisation d'amusement, ou bien ! Level: 135 Posts: 2766/11162 EXP: 28824106 For next: 510899 Since: 03-15-04 From: Sweden Since last post: 3 hours Last activity: 4 min. |
| ||
| I detected this problem today, and the download Wyv provided with fixed it. I don't use IE, my sister does thought. Something says that she wasn't careful when surfing. IE really have some security holes who needs to be fixed... or my IE using sister is just a big security hole... It fixed it, thanks.  |
|||
neotransotaku Baby Mario 戻れたら、 誰も気が付く Level: 87 Posts: 839/4016 EXP: 6220548 For next: 172226 Since: 03-15-04 From: Outside of Time/Space Since last post: 11 hours Last activity: 1 hour |
| ||
| I wonder if this was a HOSTS problem. Because I recall I would get that CoolSearch page every time I try to go to angelfire, geocities, tripod, and places like that. I believe about:blank resolves to the self IP (127.0.0.1) and if 127.0.0.1 is hijacked, then it must be why it goes there. | |||
|
Wyv Shyguy Level: 16 Posts: 70/87 EXP: 18530 For next: 1726 Since: 05-30-04 Since last post: 467 days Last activity: 339 days |
| ||
| All I know is that CWS exploits a bug in the XP Java Virtual Machine. | |||
|
neotransotaku Baby Mario 戻れたら、 誰も気が付く Level: 87 Posts: 846/4016 EXP: 6220548 For next: 172226 Since: 03-15-04 From: Outside of Time/Space Since last post: 11 hours Last activity: 1 hour |
| ||
| I thought they released the a 5MB patch for their JVM? anyways, since I use sun's JVM, i won't be effected by any attacks on microsoft's VM (but my VM is updated anyways) | |||
|
theclaw Red Cheep-cheep Level: 24 Posts: 89/202 EXP: 69367 For next: 8758 Since: 03-28-04 From: USA Since last post: 21 hours Last activity: 7 min. |
| ||
 It's still happening in IE (no other browser is affected). This isn't too serious, but how and why do such settings change on their own? No spyware or viruses are on the computer. It could be in my registry. The homepage problem is easy to fix, but just keeps coming back. Even upgrading to the new JVM and installing SP2 on Windows didn't help. Here's the name/path of two suspicious files.C:\DOCUME~1\Rocket\LOCALS~1\Temp\sp.html (the page being loaded) C:\WINDOWS\system32\jmhhmf.dll (mysterious BHO for IE, has a different name each time my homepage switches back to that one I took a picture of) http://s1di.d8t.biz/index.php Ahha! This page is almost identical to what's causing my trouble. I found it by looking at the annoying homepage's source info. On the very bottom was an address which redirects itself to what I typed in bold. (edited by theclaw on 06-27-04 02:56 AM) |
| Add to favorites | "RSS" Feed | Next newer thread | Next older thread |
| Acmlm's Board - I2 Archive - Hardware/Software - Help! IE homepage = WTF? |
| | |
