Hijacked Home Page

["The Avatar Man"]

this is what I was able to find
dkservice.exe
Diskeeper Workstation Component
kind of vague

[SEANOFF]

know what that is aswell I'm afraid- its a good defragger- don't know why its running though!
Nothing else appears suspicious but thanks anyway

[SEANOFF]

Just run adaware again- it didnt find anything but said 26 running process's

Found 12 when i did ctrl-alt del?

Why- anyone know?

[VB]

http://www.mlin.net/StartupCPL.shtml

With this handy tool you can see what programs are started when your computer starts.


But I think that you may have some kind of browser plugin that is causing the trouble. Are there any toolbars or other things in your browser which weren't there previously?


Go to Windows\Downloaded Program Files\
Right-click on each item and go to properties. See if there is anything suspicious there.


Go to Control Panel > Add/remove Programs
Any suspicious programs there?

[racer II]

Don`t forget to scan your computer for viruses, i can be a virus

[SEANOFF]

no- still no good guys. but thanks

why am i getting contact 'restrictions in place on this computer contact your systems admin'?

Can I search for this anywhere?

Nortons updated and running - but it wasn't for a day or so- so ultimately my own stupid fault!

Since scanned with this adaware, sybot and anti trojan all found nothing!

Anymore ideas people?

[smellycat]

This OpenTech Page discusses the problem.

The solution given was as follows.

I did a little digging and found NoSelectDownloadDir key in:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions

Changed it to 0 from 1 and now I can download & save.

Hope this works.

[Siras]

Well spybot search and destroy can lock the site on what u want it to.
in the new version spybot search and dsetroy 1.2 there is a new feature called Immunize u can check for problems and it can deal with them
and under miscellanous protecrtion there is an option to locl IE start page setting click on that and it should work.

[war59312]

I wrote this little code for you. This unlocks or locks the home page. Just double click it to lock and double click again to unlock. Or the other way around. So you will never get locked out again. Enter the text below into notepad and save it as a .vbs file. Enjoy.

'Restrict setting of default home page
'Written Just For SEANOFF
'Enjoy

Option Explicit

'Declare variables
Dim WSHShell, n, MyBox, p, p1, p2, t, errnum, vers
Dim enab, disab, jobfunc, itemtype

Set WSHShell = WScript.CreateObject("WScript.Shell")
p = "HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\"
p = p & "HomePage"
itemtype = "REG_DWORD"
enab = "ENABLED"
disab = "DISABLED"
jobfunc = "Setting of default home page is "

'This section tries to read the registry key value. If not present an
'error is generated. Normal error return should be 0 if value is
'present
t = "Confirmation"
Err.Clear
On Error Resume Next
n = WSHShell.RegRead (p)
On Error Goto 0
errnum = Err.Number

if errnum <> 0 then
&#39;Create the registry key value for HomePage with value 0
WSHShell.RegWrite p, 0, itemtype
End If

&#39;If the key is present, or was created, it is toggled
&#39;Confirmations can be disabled by commenting out
&#39;the two MyBox lines below

If n = 0 Then
n = 1
WSHShell.RegWrite p, n, itemtype
Mybox = MsgBox(jobfunc & disab, 4096, t)
ElseIf n = 1 then
n = 0
WSHShell.RegWrite p, n, itemtype
Mybox = MsgBox(jobfunc & enab, 4096, t)
End If

[SEANOFF]

thanks very much guys

Homepage back and unlocked&#33;

Very interesting thanks again&#33;