Home page changed each day
From: Acejack (ajder_at_san.rr.com)
Date: 02/02/04
- Next message: jmd: "cannot open IE"
- Previous message: Haim: "RPC Doom Virus Detected! Click OK to Disinfect"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 2 Feb 2004 15:38:45 -0800
Shawn,
None of the published advice fixed this problem for me, so
I spent HOURS debugging it on my son's PC. Below are the
details of how I fixed it and I hope it works for you too.
Acejack
ajder@san.rr.com
Problem:
Internet Explorer home page is reset to an undesired site
(e.g. www.adfreesearch.com) every time after reboot.
Cause:
Executable file called winlogon resides in
C:\windows
and/or
C:\documents and settings\all users\start
menu\programs\startup
(or higher up this tree)
Description:
The file may be identified thru properties as approx 114K
in size and was previously named rslocal.exe. It is
difficult to identify and eliminate because it masquerades
as the Windows system program that resides in
C:\Windows\system 32 and is needed to run Windows. The
legitimate file is identified as a Microsoft product at
version 5.x with a size of 504K in my XP and 177K in my
2000 system. Since both programs start at boot up they
will be found in the processes running list in Task
Manager and the pretender can't be shut down because
Windows thinks it is the critical task with the same name.
Solution:
1)Rename the intruder (e.g. winlogonoff.exe) at all
locations.
2)In XP, run the System Configuration Utility (msconfig)
and deselect any lines relating to winlogon under Startup
tab. Return to the General tab and select Normal Startup
before closing with <OK>.
3)Restart the PC.
4)Delete all instances of the intruding file (winlogonoff).
5)Empty the recycle bin.
6)Set the Home Page as desired (Tools>Internet Options,
General tab).
7)Restart the computer and check the system has been
cleaned.
>-----Original Message-----
>My default home page is changed each morning to a global-
>search engine. I change the default in internet options
>& it is good for the rest of the day, but changes back
>the next day.
>I have installed a spy-ware program...no help.
>I have edited my registry...comes back the next day.
>I have checked my HOSTS...no help.
>I figure something is editing my registry every morning
>when I log-on, but I can't figure out what.
>Any help is appreciated.
>
>.
>
- Next message: jmd: "cannot open IE"
- Previous message: Haim: "RPC Doom Virus Detected! Click OK to Disinfect"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
