RE: Home page being redirected to www.incredifind.com

From: Tre (anonymous_at_discussions.microsoft.com)
Date: 02/13/04


Date: Fri, 13 Feb 2004 07:06:06 -0800

Thanks, that did the trick. Do you know how to block it from coming back?
     
     ----- Acejack wrote: -----
     
     Here's the details of what I found and how I fixed the
     problem. I hope it helps.
     Acejack
     ajder@san.rr.com
     
     Problem:
     Internet Explorer home page is reset to an undesired site
     (e.g. www.adfreesearch.com) every time after reboot.
     
     Cause:
     Executable file called winlogon resides in
     C:\windows
     and/or
     C:\documents and settings\all users\start
     menu\programs\startup
     (or higher up this tree)
     
     Description:
     The file may be identified thru properties as approx 114K
     in size and was previously named rslocal.exe.
     It is difficult to identify and eliminate because it
     masquerades as the Windows system program that resides in
     C:\Windows\system 32 and is needed to run Windows. The
     legitimate file is identified as a Microsoft product at
     version 5.x with a size of 504K in my XP and 177K in my
     2000 system. Since both programs start at boot up they
     will be found in the processes running list in Task
     Manager and the pretender can't be shut down because
     Windows thinks it is the critical task with the same name.
     
     Solution:
     1)Rename the intruder (e.g. winlogonoff.exe) at all
     locations.
     2)In XP, run the System Configuration Utility (msconfig)
     and deselect any lines relating to winlogon under Startup
     tab. Return to the General tab and select Normal Startup
     before closing with <OK>.
     3)Restart the PC.
     4)Delete all instances of the intruding file (winlogonoff).
     5)Empty the recycle bin.
     6)Set the Home Page as desired (Tools>Internet Options,
     General tab).
     7)Restart the computer and check the system has been
     cleaned.
>-----Original Message-----
>I had some spyware on my computer and I have been able to
>clean everything but this problem: My home page is set to
>MSN.com but when I open a browser, it is trying to open
>www.incredifind.com and no matter what URL I insert, it
>still defaults to this address. I have no idea how to
>correct this problem. Can anyone give me a heads up?
>>I would greatly appreciate it!!!
>>Thanks in advance.
>.
>



Relevant Pages

  • Re: Home page being redirected to www.incredifind.com
    ... C:\Windows\system 32 and is needed to run Windows. ... and deselect any lines relating to winlogon under Startup ... Return to the General tab and select Normal Startup ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Home page being redirected to www.incredifind.com
    ... C:\Windows\system 32 and is needed to run Windows. ... and deselect any lines relating to winlogon under Startup ... Return to the General tab and select Normal Startup ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Home page changed each day
    ... C:\Windows\system 32 and is needed to run Windows. ... and deselect any lines relating to winlogon under Startup ... Return to the General tab and select Normal Startup ... I change the default in internet options ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: How to stop programs from starting on boot
    ... I tried to stop them with msconfig, unchecking the ... the Normal Startup circle in the General tab, ... So don't switch it back to Normal Startup! ...
    (microsoft.public.windowsxp.general)
  • Re: no services are running at start up
    ... Under the General tab, place a dot next to "Normal Startup - ... Windows - Shell/User ... "Matt Cortner" wrote: ...
    (microsoft.public.windowsxp.general)

Loading