Re: Home page being redirected to www.incredifind.com

From: H Leboeuf (NoAddress_at_generation.invalid)
Date: 02/14/04

• Next message: PSEUDO: "Error: "internet explorer has encountered a problem and needs to close""
• Previous message: H Leboeuf: "Re: HELP! Installation Problems"
• In reply to: Tre: "RE: Home page being redirected to www.incredifind.com"
• Messages sorted by: [ date ] [ thread ]

Date: Sat, 14 Feb 2004 09:22:36 -0500

http://mvps.org/winhelp2002/unwanted.htm
More specifically "How To: Prevent this from happening again?"

-- 
Henri Leboeuf
Web page: http://www.generation.net/~hleboeuf/index.htm
"Tre" <anonymous@discussions.microsoft.com> wrote in message
news:391346E2-0493-47FD-ABC5-575E7B20562C@microsoft.com...
> Thanks, that did the trick.  Do you know how to block it from coming back?
>
>      ----- Acejack wrote: -----
>
>      Here's the details of what I found and how I fixed the
>      problem.  I hope it helps.
>      Acejack
>      ajder@san.rr.com
>
>      Problem:
>      Internet Explorer home page is reset to an undesired site
>      (e.g. www.adfreesearch.com) every time after reboot.
>
>      Cause:
>      Executable file called winlogon resides in
>      C:\windows
>      and/or
>      C:\documents and settings\all users\start
>      menu\programs\startup
>      (or higher up this tree)
>
>      Description:
>      The file may be identified thru properties as approx 114K
>      in size and was previously named rslocal.exe.
>      It is difficult to identify and eliminate because it
>      masquerades as the Windows system program that resides in
>      C:\Windows\system 32 and is needed to run Windows.  The
>      legitimate file is identified as a Microsoft product at
>      version 5.x with a size of 504K in my XP and 177K in my
>      2000 system.  Since both programs start at boot up they
>      will be found in the processes running list in Task
>      Manager and the pretender can't be shut down because
>      Windows thinks it is the critical task with the same name.
>
>      Solution:
>      1)Rename the intruder (e.g. winlogonoff.exe) at all
>      locations.
>      2)In XP, run the System Configuration Utility (msconfig)
>      and deselect any lines relating to winlogon under Startup
>      tab.  Return to the General tab and select Normal Startup
>      before closing with <OK>.
>      3)Restart the PC.
>      4)Delete all instances of the intruding file (winlogonoff).
>      5)Empty the recycle bin.
>      6)Set the Home Page as desired (Tools>Internet Options,
>      General tab).
>      7)Restart the computer and check the system has been
>      cleaned.
>      >-----Original Message-----
>      >I had some spyware on my computer and I have been able to
>      >clean everything but this problem: My home page is set to
>      >MSN.com but when I open a browser, it is trying to open
>      >www.incredifind.com and no matter what URL I insert, it
>      >still defaults to this address. I have no idea how to
>      >correct this problem. Can anyone give me a heads up?
>      >>I would greatly appreciate it!!!
>      >>Thanks in advance.
>      >.
>      >

• Next message: PSEUDO: "Error: "internet explorer has encountered a problem and needs to close""
• Previous message: H Leboeuf: "Re: HELP! Installation Problems"
• In reply to: Tre: "RE: Home page being redirected to www.incredifind.com"
• Messages sorted by: [ date ] [ thread ]

• Windows
• Science
• Usenet

• Archive
• About
• Privacy
• Search
• Imprint