Hijack Homepage

[antg]

Hi Pieter , if you are still there..

attached is my home pc log. Every few days the homepage gets changed, when I change it back the PC tries to write to the floppy ? The settings do change but seemto change back a few days later.

antg

[Pieter_Arntz]

Hi antg,

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.sureseeker.com/search.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.sureseeker.com/search.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sureseeker.com/search.htm

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://url
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.sureseeker.com/search.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://url

O4 - HKCU\..\Run: [OPQFile] C:\WINDOWS\regedit.exe /s C:\WINDOWS\SYSTEM\rad368CE.tmp

O16 - DPF: {1678F7E1-C422-11D0-AD7D-00400515CAAA} - http://files.cometsystems.com/cometcursor/comet.cab

Reboot after doing so, preferably into safe mode (http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406)
and delete:
C:\WINDOWS\SYSTEM\rad368CE.tmp <= that contains the info to change your homepage.

Regards,

Pieter

[antg]

Ok we'll see how that goes over the next few days...!

Nite