IE 6.0 default page hijacked

My IE 6.0 default page ihas been replaced by a search site listing sex toys & products although in TOOLS/INTERNET OPTIONS the default is blank.
Opening the IE browser always leave 2 files on the desktop
name FAST LOANS & ONLINE PHARMACY.
Worst of all, I cannot view the source of the website.
Cleaning the TEMP INTERNET FILES, HISTORY and all
that does not help nor could I find it in the registry.
I could be missing something. Please help.

 

Hi Aida. Welcome to WindowsBBS!

First download Spybot, Ad-aware and CWShredder. Links in my signature. After installing, immediately update Spybot and Ad-aware and run. Delete all they find. (I generally run Spybot, then Ad-aware then Spybot again) Then close all browsers and run CWShredder from the fix button. If the problem remains, download HijackThis from the CWShredder link. Place in a permant folder and open. Click scan, then save log. After saving it will open in notepad. Select all (from the edit button), copy and paste here. Don't fix anything with it yet! Someone experienced with the logs will instruct you how/what to fix.

 

Thanks to noahdfear for the reply. I'll look at the alternative you suggested next time I get hijacked. After posting the SOS in this bbs, I went straight to troubleshoot this problem and solved it. For the benefit of those who got the same problem, in addition to Mr. noahdfear's suggestion, this is how I got rid of those peskies.

The culprits responsible for this are these files:

nem213.dll ( Windows)
search.dll ( C:\Program Files\Common Files\OE )
msbb.dll ( C:\Program Files\Common Files\OE )
rvupdmgr.exe ( C:\Program Files\Common Files\updmgr)
simgr.exe ( C:\Program Files\Common Files\updmgr)
update.exe ( C:\Program Files\Orbit)

updmgr must be deleted from the Windows XP registry
HKEY_LOCAL_MACHINE\SOFTWARE]UPDMGR
while the rest of the culprits listed above can be deleted
right away.

Thanks to all who viewed & post.

 

Good sleuthing Aida. All spyware/adware/malware. However, they don't always infect the same files on every machine, and often infect more files than you found, on each PC. Best to run cleaners. They are designed to find all of the entries these nasties plant, and remove them.