PDA

View Full Version : IE homepage problem


Reign
16 Nov 2003, 4:39pm
Okay i've had this problem for a good 2 weeks now. Nomatter what i set my IE homepage to... either blank or google.com... after i open the window a few times... it changes itself to www.idgsearch.com. So then i change it back to google.com.. and then again after a few minutes changes itself back to idgsearch. I ran adaware many times... virus scan... nothing helped. I tried searching for it on my comp... nothing. What can the problem be?

Al_Capown
16 Nov 2003, 4:44pm
Adaware is crap compared to SpyBot.

Download This (http://download.com.com/3000-2144-10122137.html?part=104443&subj=dlpage&tag=button)

First update everything for it, then just go and look for the spyware. I'm 99.9% sure it will get rid of it.

t1rhino
16 Nov 2003, 4:45pm
http://www.tek-tips.com/gpviewthread.cfm/qid/695775/pid/779/lev2/67/lev3/70

Reign
16 Nov 2003, 5:24pm
Ugh this thing seems serious.

Al_Capown
16 Nov 2003, 5:25pm
Spybot didn't work?

If not, clear all your cookies. If that doesn't work uninstall and reinstall IE

Enverex
16 Nov 2003, 5:28pm
Seems like Hijack This! works on it, just delete the ones with idg in it...

http://atomnet.co.uk/?p=programs&search=hijack

NS

Reign
16 Nov 2003, 5:33pm
Okay updated and ran the search.... found 27 files that adaware didn't. Now... it found many registry files and i just clicked fix problems. did this delete the registry files or just fix em and create backups?

Al_Capown
16 Nov 2003, 5:34pm
Well, perhaps the registry files that were there were the files you didn't want, but if not Spybot does backup all files just incase. Did it fix it?

Enverex
16 Nov 2003, 5:36pm
Read that other thread. It clearly states that Adaware and Spybot DO NOT solve the problem, only removing the registry entries via "Hijack This!" does (subject to recent updating to Adaware and SB).

NS

Reign
16 Nov 2003, 5:52pm
Alright ran hijack this and it found about 20 files with igdsearch and a 2020search... deleted all those. Well see how it goes.

Reign
17 Nov 2003, 12:08am
Ugh i went almost an entire day without it and now its back!

Enverex
17 Nov 2003, 12:09am
format C:
fdisk /mbr
mkreiserfs /dev/hd0

NS

Reign
17 Nov 2003, 12:15am
I'm not formatting for one stupid trojan. get real

Reign
17 Nov 2003, 12:27am
i just deleted my googlems.dll ... lets hope it works.

Straight_Man
17 Nov 2003, 12:43am
Um, the Google toolbar does not do this normally. However, it does look like a trojan or spyware. One thing that Adaware needs is new adware definition files every few weeks (it is not really a heavily heuristic based killer, it needs definition files just as your Norton AntiVirus does), but the bottom line cure for your box is as Nightshade suggests-- make the box a non-Windows box! :D (J/K)

Now you know why I surf in Linux 90% of the time. The other 10% is the poor Barton box getting its security and software updates on DIALUP. It does ZERO email pickup and ZERO recreational/hobby surfing.

John (in Opera 7.21 Registered version, using Thunderbird for email-- bye, bye Mozilla full version, you have a memory leak in KDE 3.1.1, 3.1.2 and 3.1.3)

MERRICK
17 Nov 2003, 6:01am
I happened on this page by chance and saw this:

zzgshp gshp.
vbs Homepage
hi-jacker that re-defines your IE or Netscape start page

The page this is on has a pretty comprehensive list of startup progs both good and bad. Might help. Not realy my forte:

http://www.pacs-portal.co.uk/startup_pages/startup_all.php

Reign
17 Nov 2003, 11:14pm
The bitch is back....

fudgam
18 Nov 2003, 12:33am
I had a problem exactly like this with xzoomy. I just went into "Add/Remove Programs" and eliminated the problem from there.

fudgam
18 Nov 2003, 12:35am
I think it was called xzoomy. . . ..

Kwitko
18 Nov 2003, 12:43am
Reign had this to say
The bitch is back....

Okay, remove it one more time, then download and install SpywareBlaster (http://www.javacoolsoftware.com/spywareblaster.html). It will prevent it from trying to reinstall itself. Hopefully.

Reign
18 Nov 2003, 3:11am
I ran the program that MERRICK gave the link to... and it was the only one able to find googlems.dll... so far it's been good. Kwit.. i downlaoded that thing and it found about 1000 spyware... and my other 4 programs (ad aware, spybot, hijack, and cws) didn't find those.. wtf is up with that? I was scared to clean it... i feel itll mess up my computer somehow.

Enverex
18 Nov 2003, 9:33am
Reign had this to say
I ran the program that MERRICK gave the link to... and it was the only one able to find googlems.dll... so far it's been good. Kwit.. i downlaoded that thing and it found about 1000 spyware... and my other 4 programs (ad aware, spybot, hijack, and cws) didn't find those.. wtf is up with that? I was scared to clean it... i feel itll mess up my computer somehow.

Couldn't mess it up any more than how the huge amount of spyware that you managed to install has....

NS

Mancabus
19 Nov 2003, 5:11pm
Always check the run local machine and run current user in the registry, or use MSCONFIG if WinXP.

HKEYLM/SOFTWARE/MICROSOFT/WINDOWS/CURRENTVERSION/RUN
and
HKEYCU/SOFTWARE/MICROSOFT/WINDOWS/CURRENTVERSION/RUN

Then check here (http://www.pacs-portal.co.uk/startup_pages/startup_all.php) to see if a problem

I had a hijacker on my machine that kept loading, I forgot to check these places, but when I did there was a crappy hijacking exe listed.

Since installing spywareblaster, I haven't had any spyware at all.

TheLostSwede
19 Nov 2003, 6:18pm
Reign had this to say
I ran the program that MERRICK gave the link to... and it was the only one able to find googlems.dll... so far it's been good. Kwit.. i downlaoded that thing and it found about 1000 spyware... and my other 4 programs (ad aware, spybot, hijack, and cws) didn't find those.. wtf is up with that? I was scared to clean it... i feel itll mess up my computer somehow.

Those 1000 you saw are probably the ones that the program is able to PREVENT from getting installed, not the stuff you already have.

MERRICK
22 Nov 2003, 6:36pm
I ran the program that MERRICK gave the link to... and it was the only one able to find googlems.dll... so far it's been good. Kwit.. i downlaoded that thing and it found about 1000 spyware... and my other 4 programs (ad aware, spybot, hijack, and cws) didn't find those.. wtf is up with that? I was scared to clean it... i feel itll mess up my computer somehow.


I only saw a list. What program do you speak of? I'd like to try it myself. Thanks.

Josh-
28 Nov 2003, 1:38am
If you think its a trojan, virus, ect, you could try searching for ithere (http://securityresponse.symantec.com/avcenter/vinfodb.html?prodid=nav2003). Might help to get some info on it.

I'm not positive, but I think that if you try here (http://www.hftonline.com/) they may have a large virus database also, from what I remember.

Best of luck removing it..-Josh