Hijacked Home Page

[SEANOFF]

Somehow my homepage has been hijacked and I can't switch it. If I go into internet options I get a popup saying restrictions- see administrator :(
I am running 98SE and do not have system administrator. Tried S&D & AdaWare to no avail- including tools in one of them to switch home page. :angry:
Hope somebody can help- thanks

[MagicNakor]

I like my about:blank homepage. ;)

:ninja:

[ooo]

lol... intrestin....

[SEANOFF]

come on people- can't somebody help :huh:

I don't like my about:blank!


PLEASE HELP :(

[Grim]

I use 98se & what is "system administrator"?
Try lookin in your reg for the page title & edit it from there. Sounds like you have installed some program that is continually changing it.

[VB]

Try this:

Go to the website that you want as your homepage. Click on the icon that is in front of the url in the address bar. Now drag that icon on top of the home icon. That should set it as your homepage.


Otherwise search your registry for "about:blank" and change it there.

["The Avatar Man"]

once you do figure it out
http://www.kolumbus.fi/eero.muhonen/FS/fs.htm
this can lock your homepage so it wont happen again ;)

[SEANOFF]

Thanks for the replies and especially Paul- now got my homepage back :D
- had to do it through search of registry.
Any idea what leadertech Ex03a is?
Trying to find whats locked homepage in first place- out of interest/inquisitiveness now
It appears it has now backfired on about:blank as my original page is now locked :P

Anymore help would be appreciated and thanks again

[J'Pol]

To change home page you can right click explorer and select properties.

Then type the url you want into the homepage address box. Or copy and paste it in, from the site you want it set at.

[SEANOFF]

JMif- that option's not available- the properties box comes up and temp internet files and history option are avail but homepage 'greyed' out.
Thats why I'm quite interested into how its been done/whats doing it/undoing it?

like I say got my home page back but can't change that either :)


And by the way thanks for the input! ;)

[Kid1A]

get spynuke, that should get rid of it

[SEANOFF]

where from- iv'e already got spybot and adaware and they haven't done anything 4 me?

[Wizzandabe]

try this dont no if it works,
no it didnt i edited it out.

[J'Pol]

Have you tried Tools / Reset Web Settings. Perhaps something is fecked in explorer itself.

[Wizzandabe]

dl internet explorer 6. or uninstall ie 5/6


c:\program files\internet explorer\setup

[SEANOFF]

yeah all obvious tried- somethink is well and truly fecked up!

tried repairing ie aswell through system tools

its something in the registry i'm convinced of that but I'm not clever enough to find what/why!

will try u/install and back to ie as last resort, but don't think that will do it anyway- homepage ok- just curious!

[VB]

Press Ctrl+Alt+Del and check out what programs are running. Make sure nothing suspicious is amongs them.

[SEANOFF]

Anyone know what E_sicn03 is- its running Paul

["The Avatar Man"]

it appears to be a driver for an epson printer or something.
do you have one?

[SEANOFF]

That'll be that one then! thanks-what about DKservice??

["The Avatar Man"]

this is what I was able to find
dkservice.exe
Diskeeper Workstation Component
kind of vague :(

[SEANOFF]

know what that is aswell I'm afraid- its a good defragger- don't know why its running though!
Nothing else appears suspicious :( but thanks anyway

[SEANOFF]

Just run adaware again- it didnt find anything but said 26 running process's :huh:

Found 12 when i did ctrl-alt del?

Why- anyone know?

[VB]

http://www.mlin.net/StartupCPL.shtml

With this handy tool you can see what programs are started when your computer starts.


But I think that you may have some kind of browser plugin that is causing the trouble. Are there any toolbars or other things in your browser which weren't there previously?


Go to Windows\Downloaded Program Files\
Right-click on each item and go to properties. See if there is anything suspicious there.


Go to Control Panel > Add/remove Programs
Any suspicious programs there?

[racer II]

Don`t forget to scan your computer for viruses, i can be a virus

[SEANOFF]

no- still no good guys. but thanks

why am i getting contact 'restrictions in place on this computer contact your systems admin'?

Can I search for this anywhere?

Nortons updated and running - but it wasn't for a day or so- so ultimately my own stupid fault!

Since scanned with this adaware, sybot and anti trojan all found nothing!

Anymore ideas people?

[smellycat]

This OpenTech Page (http://www.opentechsupport.net/forums/archive/topic/4848.html) discusses the problem.

The solution given was as follows.


I did a little digging and found NoSelectDownloadDir key in:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions

Changed it to 0 from 1 and now I can download & save.

Hope this works. :)

[Siras]

Well spybot search and destroy can lock the site on what u want it to.
in the new version spybot search and dsetroy 1.2 there is a new feature called Immunize u can check for problems and it can deal with them
and under miscellanous protecrtion there is an option to locl IE start page setting click on that and it should work.

[war59312]

I wrote this little code for you. This unlocks or locks the home page. Just double click it to lock and double click again to unlock. Or the other way around. So you will never get locked out again. Enter the text below into notepad and save it as a .vbs file. Enjoy.

'Restrict setting of default home page
'Written Just For SEANOFF
'Enjoy

Option Explicit

'Declare variables
Dim WSHShell, n, MyBox, p, p1, p2, t, errnum, vers
Dim enab, disab, jobfunc, itemtype

Set WSHShell = WScript.CreateObject("WScript.Shell")
p = "HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\"
p = p & "HomePage"
itemtype = "REG_DWORD"
enab = "ENABLED"
disab = "DISABLED"
jobfunc = "Setting of default home page is "

'This section tries to read the registry key value. If not present an
'error is generated. Normal error return should be 0 if value is
'present
t = "Confirmation"
Err.Clear
On Error Resume Next
n = WSHShell.RegRead (p)
On Error Goto 0
errnum = Err.Number

if errnum <> 0 then
&#39;Create the registry key value for HomePage with value 0
WSHShell.RegWrite p, 0, itemtype
End If

&#39;If the key is present, or was created, it is toggled
&#39;Confirmations can be disabled by commenting out
&#39;the two MyBox lines below

If n = 0 Then
n = 1
WSHShell.RegWrite p, n, itemtype
Mybox = MsgBox(jobfunc & disab, 4096, t)
ElseIf n = 1 then
n = 0
WSHShell.RegWrite p, n, itemtype
Mybox = MsgBox(jobfunc & enab, 4096, t)
End If

[SEANOFF]

thanks very much guys :)

Homepage back and unlocked&#33;

Very interesting thanks again&#33;

[Wizzandabe]

Originally posted by Paul@5 April 2003 - 20:53
http://www.mlin.net/StartupCPL.shtml

With this handy tool you can see what programs are started when your computer starts.


But I think that you may have some kind of browser plugin that is causing the trouble. Are there any toolbars or other things in your browser which weren&#39;t there previously?


Go to Windows&#092;Downloaded Program Files&#092;
Right-click on each item and go to properties. See if there is anything suspicious there.


Go to Control Panel > Add/remove Programs
Any suspicious programs there?
chears paul that a good 1.