IE unable to set main homepage

i using win2003. i unable to change my homepage address by click internet option. everthing was fine just that only unable to re-write the URL...

the main website was pointing whatsfind.com whereby that not mine. i used to set my homepage as yahoo.com

pls help

 

Hello naughtyboy, I suggest you do this:

Make sure you have the up-to-date versions of Spybot (v1.3), Ad-aware (build 6.181) and HijackThis. All are free and available bellow.

Download Spybot, install, update and run Spybot. Delete all it finds that is prechecked. Then download Ad-aware, install, update and configure Ad-aware for a custom full scan and run, deleting all it finds.

Spybot:
Go to Start > Programs >Spybot > Search & Destroy and choose Spybot S&D

Close ALL windows except Spybot S&D
Click the button to "Search for Updates" and download and install the Updates.
Next click the button "Check for Problems"
When Spybot is complete, it will be showing "RED" (RED) entries "BLACK" entries and "GREEN" (GREEN) entries in the window
Put a check mark beside the RED (RED) entries ONLY.
Choose "Fix Selected Problems" and allow Spybot to fix the RED (RED) entries.

Ad-Aware FULL SCAN:
Click on the Start Button, Tick Use Custom scanning options, Customize

Scan Within Archives
Scan Active Processes
Scan Registry
Deep Scan Registry
Scan my IE favorites for banned URL’s
Scan my Hosts file
Under Click here to select drives + folders, choose:
All of your hard drives
Click on the Advanced button on the left and select:

Include additional process information
Include additional file information
Include environment information
Include additional object details
Click the Tweak button and select:

Under the Scanning Engine:
Unload recognized processes during scanning
Include basic Ad-aware settings in logfile
Include additional Ad-aware settings in logfile
Under the Cleaning Engine:
Tick Let Windows remove files in use at next reboot

Click on Proceed to save the settings.

Click Start and on the next screen choose Activate in-depth Scan at the bottom of the page and then choose:

Use Custom Scanning Options
Click Next and Ad-aware will scan your hard drive(s) with the options you have selected.

Save the log file when it asks and then click Finish

When finished, mark everything for removal and get rid of it. (Right-click the window and choose Select All from the drop down menu and click Next).


Download HijackThis from link in my signature. Save it to a permanent folder (I create a new folder in C:\ named HJT). Open and hit scan, then save log. Once it is saved it will open in notepad. Select all from the edit button, copy and paste the results here. Don't fix anything with it yet! Someone experienced with the logs will advise you.

 

now i had remove the whatsfind.com by ad ware and spybot.
i also used hjackthis to scan ...
now my IE still unable to type in my own homepage. still in grey....

now the main homepage is "about:blank "

 

If you follow the suggestions in post #2, I'm sure someone will help you.

 

Yes,ad-aware, spybot and hijackthis are right to solve this kind of problem and very useful!

 

yes there remove the bugs but still unable to let me change my address in my IE

i also download spyware doctor recently... the ads had remove, what abt my edit my URL???

thank

 

Are you running the older version of SpyBot v1.2? There is an option in it to prevent users from changing the Home Page.

POSTa HijackThis log so we can tell what you're running.

Regards - Charles

 

i using spybot v1.3

for highjackthis, i copy and paste from save log:

Logfile of HijackThis v1.97.7
Scan saved at 12:47:38 AM, on 8/12/2004
Platform: Unknown Windows (WinNT 5.02.3790)
MSIE: Internet Explorer v6.00 (6.00.3790.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Apache Group\Apache2\bin\Apache.exe
C:\Program Files\Apache Group\Apache2\bin\Apache.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
c:\mysql\bin\mysqld-nt.exe
C:\WINDOWS\system32\Dfssvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Spyware Doctor\spydoctor.exe
C:\Program Files\Apache Group\Apache2\bin\ApacheMonitor.exe
C:\mysql\bin\winmysqladmin.exe
C:\Program Files\NETGEAR\MA111 Configuration Utility\wlancfg4.EXE
C:\Documents and Settings\Administrator\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = res://shdoclc.dll/hardAdmin.htm
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://www.yahoo.com/
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\spydoctor.exe" /Q
O4 - Startup: WinMySQLadmin.lnk = C:\mysql\bin\winmysqladmin.exe
O4 - Global Startup: MA111 Configuration Utility.lnk = C:\Program Files\NETGEAR\MA111 Configuration Utility\wlancfg.exe
O4 - Global Startup: Monitor Apache Servers.lnk = C:\Program Files\Apache Group\Apache2\bin\ApacheMonitor.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research (HKLM)
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/activedata/SymAData.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/activedata/ActiveData.cab





that all
hope can help
thank

 

O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\spydoctor.exe" /Q

If memory serves, SpyDoctor is an Ad-Aware knock-off. We'll get back to you on that. But in the meantime, disable it to see whether that's what is preventing you from changing the home page. Then re-enable it if it makes you feel better.

O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Pol icies\System, DisableRegedit=1

Don't know what that is, looks dodgy to me.

Don't fix anything - others will look at your log.

If you're not running the latest Ad-Aware version - get SE Personal http://www.lavasoft.de/

Regards - Charles

 

Lookup security tools here to see whether they are legitimate and worth the mony:

http://www.spywarewarrior.com/rogue_anti-spyware.htm

I went looking SpywareDoctor:

http://www.pctools.com/spyware-doctor/

Sounds a lot like SpyBot. You have both running, may be a conflict issue.

Regards - Charles

 

Logfile of HijackThis v1.97.7
MSIE: Internet Explorer v6.00 (6.00.3790.0000)

Both are out dated.
Delete the HijackThis you have on the desktop!

Download the latest version and HijackThis from link in my signature. Save it to a permanent folder (I create a new folder in C:\ named HJT). You have it on the desktop.

You need to visit Windows Update. Scan for updates and accept all critical updates.
Reboot and go back to Windows Update until there are no more criticals offered.

Run HijackThis and post a new log