Previous Thread:   "Send information" prompt box

5/26/2006 3:29:01 PM    de
Several days after installing IE7, the primary Home Page seems to have been  
  
hijacked.  Now my primary Home Page has become the following:  [http://䜇䜇/ ]  
  
-- when copied from Internet Options>General>Home page it shows up as some  
  
sort of Asian charachters [ http://冘䜇/ ] .  Whenever I open IE7, it attempts  
  
to go directly to the following url: [ http://xn--4zo33y/ ] to which IE  
  
responds 'Page Not Found' in the open tab BUT takes me to the following url:  
  
[ http://www.searchathand.com/ ] .  
  
I've added http://www.google.com to the home page list, and IE7 now opens  
  
two tabs when starting - the first is still as shown above.  If I delete the  
  
weird one from the General tab, it instead removes the Google home page  
  
listing and returns to the single hijacked default.  All spyware and sweep  
  
programs fail to find anything wrong; even WindowsLive tools fail to find  
  
anything wrong.  Registry searches for those characters also fail to turn up  
  
anything.  After uninstalling IE7, IE6 shows only my one home page choice -  
  
once I -reinstalled- IE7, the weird home page instantly appeared again.



5/26/2006 6:41:17 PM    Can't_change/de
Though I doubt it has anything to do with your problems, leave IE7 Beta2  
  
uninstalled for now.  
  
Checking for/Help with Hijackware  
  
http://aumha.org/a/parasite.htm  
  
http://aumha.org/a/quickfix.htm  
  
http://aumha.net/viewtopic.php?t=5878  
  
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction  
  
http://mvps.org/winhelp2002/unwanted.htm  
  
http://inetexplorer.mvps.org/data/prevention.htm  
  
http://inetexplorer.mvps.org/tshoot.html  
  
http://www.mvps.org/sramesh2k/Malware_Defence.htm  
  
http://defendingyourmachine.blogspot.com/  
  
http://www.elephantboycomputers.com/page2.html#Removing_Malware  
  
When all else fails, HijackThis v1.99.1  
  
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.  
  
It will help you to both identify and remove any hijackware/spyware.  **Post  
  
your log to http://aumha.net/viewforum.php?f=30,  
  
http://castlecops.com/forum67.html,  
  
http://forums.subratam.org/index.php?showforum=7, or other appropriate  
  
forums for expert analysis, not here.**  
  
--  
  
~Robear Dyer (PA Bear)  
  
MS MVP-Windows (IE/OE, Shell/User, Security), Aumha.org VSOP, DTS-L.org  
  
Xenophobe0814 wrote: