|
|
 |
|
|
Pages: 1
Internet search website keeps setting itself to my homepage
(Click here to view the original thread with full colors/images)
Posted by: Gmxman
This search things resets itself to my home page every time I restart my comp or anything like that.
I'll set a new one every time, but it resets it.
Ad-Aware tends to delete things, but it still happens.
Posted by: chaosisreality
easist solution: dont visit the site.......
do google for your searches
[EDIT]-Duh, didn't read it properly the first time. CAn you tell me the file name doing this?
Posted by: Ocean
WARNING, DO NOT GO TO OK-SEARCH
is it ok-search.com?
if you know the site, i would block it using the host file trick. thats what i did to keep me from getting ok-search.com ever again
in:
C:\WINNT\system32\drivers\etc\hosts
i added these two lines:
127.0.0.1 www.ok-search.com
127.0.0.1 ok-search.com
------------------------------------------------
i had to remove all instances of their site from my registry manually though. then i found a spiffy little utility that allows you to do it in a simpler manner. and it should apply to you if you dont like ad aware's deletions.
Posted by: Ocean
the no parsing the url isnt working. i dont want the url to be clickable 
ahh, i had to delete the previous parsing's url vb code tags for the unparsing option to work.
Posted by: redwench
you need to up your security settings. esp the install without permission. grab spybot and use the immunize feature. you might need to run a trojan scan, sometimes it takes a while for the spyware scannters to update for a new one.
Posted by: chaosisreality
Depends if its cataoged in spybot or adaware. A bit back i had a pain in the ass thing called rb32, it popped ads out of nowhere and kept setting my homepage to these scam search sites. Spybot didntpick it up, not norton, or adaware. So i wemt into msconfig and disabled the activate for it, so the file was dormant and i can remove it. Seriously, if it isnt a trusted site, dont go there because it can drive you mad....
Posted by: Gmxman
It's called Cool Web Search
Address is http://66.250.130.194/index.php?acc=2002
it's weird.. acc=2002? I'm registered for something somehow?
Posted by: Gmxman
I can't find that WINNT thing, either.
I have a WINNT32 in my Windows folder.. it's a text thing..
Posted by: redwench
you dont want to be messing in your registry. most browser hijackers are in some scanner. you might have to go through a few.
when was the last time you updated spybot/adaware or your antivirus? should be done weekly.
anyway, this is the reverse dns for that ip if you want someone to yell at. http://www.dnsstuff.com/tools/whois...is.cogentco.com
Posted by: Ocean
oh, the winnt folder in xp is called Windows. sorry for not pointing that out.
http://doa2.host.sk/help/supertrick.htm has description on how it works
you can download a functional hosts file (which they call supertrick) at http://www.kazaalite.tk/
Posted by: Gmxman
So just downloading Kazaa Lite will fix the problem?
Posted by: Gmxman
Nope.. downloading it didn't help.
I notice when I start up browser, it starts out www.approvedlinks.com, then changes to that IP address.
Entering approvedlinks.com goes to the search site.
Posted by: Ocean
i didnt say anything about downloading kazaa lite, i said download a hosts file from the kazaa lite site to give you something more useful to edit and block. download the hijack this utility i attached, to remove the instances. did you run any scanners?
Posted by: dbltime
You can also try to set your internet options to not allow third party browser extensions. Go to internet options and advanced tab. Uncheck "enable third party browsers extensions." This was the only thing that stopped some spider search from hijacking my home page. Goodluck.
Posted by: Gmxman
Third party thing didn't work.
Posted by: redwench
all the stuff on the net says spybot and adaware will remove it. either youre running old versions, youve set it as an exclude, or something has disabled them.
Posted by: Gmxman
Running Ad-Aware 6.0..
Gonna try Spy-Bot.
Posted by: Gmxman
I ran em both.. they deleted lots of stuff..
I restarted, ran them both before I even opened explorer.
They said it's all clear..
I open browser, and it's that stupid site.
Posted by: redwench
you ran online trojan and av scans, as well as updating adaware and spybot? yes, im harping, but thats important; these things update weekly.
pull up your task list, at various times. after a reboot, when you start ie, after closing ie. see if theres something funny on the list. try to track down the program thats doing it. if its doing it when you reboot, rather then start ie, im inclined to think its either in a startup program of its own (good), or its a virus thats embedded itself in the explorer or other system file (bad). run msconfig, or some other program that will aloow you to check on the start up list. actually, i think spybot can access it. if nothing seems to be able to deal with it, youll have to reinstall ie.
Posted by: Gmxman
I mailed the link on that search site, and the dude replied back with a link.
The link was a page saying how the guy often gets mailed with not-so-pleasant commentary on Cool Web Search, and he had a download there made just for Cool Web Search problem.
Now it is solved!
Thanks much for the help peoples.
Posted by: kennyp2
Had the same problem last week. Internet explorer would fire up TDKO Passthrough as my home page and then google .. It all happened so fast I could only just notice it. It didn`t seem to do anything wrong, it was just annoying . I removed tdko from my registry, rest google as my home page but when I restarted back it came.. I only managed to remove it with an uninstaller fromm the tdko help page on their website. I still don`t know why it was there
|
|
|
|
|
