Home page being redirected to www.incredifind.com
From: Acejack (ajder_at_san.rr.com)
Date: 02/02/04
- Next message: Haim: "RPC Doom Virus Detected! Click OK to Disinfect"
- Previous message: eddie: "annoying clicking noise"
- Next in thread: tre: "RE: Home page being redirected to www.incredifind.com"
- Maybe reply: tre: "RE: Home page being redirected to www.incredifind.com"
- Reply: Tre: "RE: Home page being redirected to www.incredifind.com"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 2 Feb 2004 15:32:25 -0800
Here's the details of what I found and how I fixed the
problem. I hope it helps.
Acejack
ajder@san.rr.com
Problem:
Internet Explorer home page is reset to an undesired site
(e.g. www.adfreesearch.com) every time after reboot.
Cause:
Executable file called winlogon resides in
C:\windows
and/or
C:\documents and settings\all users\start
menu\programs\startup
(or higher up this tree)
Description:
The file may be identified thru properties as approx 114K
in size and was previously named rslocal.exe.
It is difficult to identify and eliminate because it
masquerades as the Windows system program that resides in
C:\Windows\system 32 and is needed to run Windows. The
legitimate file is identified as a Microsoft product at
version 5.x with a size of 504K in my XP and 177K in my
2000 system. Since both programs start at boot up they
will be found in the processes running list in Task
Manager and the pretender can't be shut down because
Windows thinks it is the critical task with the same name.
Solution:
1)Rename the intruder (e.g. winlogonoff.exe) at all
locations.
2)In XP, run the System Configuration Utility (msconfig)
and deselect any lines relating to winlogon under Startup
tab. Return to the General tab and select Normal Startup
before closing with <OK>.
3)Restart the PC.
4)Delete all instances of the intruding file (winlogonoff).
5)Empty the recycle bin.
6)Set the Home Page as desired (Tools>Internet Options,
General tab).
7)Restart the computer and check the system has been
cleaned.
>-----Original Message-----
>I had some spyware on my computer and I have been able to
>clean everything but this problem: My home page is set to
>MSN.com but when I open a browser, it is trying to open
>www.incredifind.com and no matter what URL I insert, it
>still defaults to this address. I have no idea how to
>correct this problem. Can anyone give me a heads up?
>
>I would greatly appreciate it!!!
>
>Thanks in advance.
>.
>
- Next message: Haim: "RPC Doom Virus Detected! Click OK to Disinfect"
- Previous message: eddie: "annoying clicking noise"
- Next in thread: tre: "RE: Home page being redirected to www.incredifind.com"
- Maybe reply: tre: "RE: Home page being redirected to www.incredifind.com"
- Reply: Tre: "RE: Home page being redirected to www.incredifind.com"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
