Highjacked Browser !!

[Gilou27]

my browser (IE 6) has been highjacked :
my home page has been replaced by a connection to a "self called search engine" and all home page settings facilities have been desabled.

Is there anyway to restore original settings other than remove and reinstall IE 6 ??

How can I prevent this to happen again ?

[Unzy]

Hi Gilou,

Can you please download HijackThis (http://www.spywareinfo.com/~merijn/files/hijackthis.zip) ?

Unzip -> doubleclick hijackthis.exe -> scan -> save log as gilou.txt and copypaste the complete contnets of it here please. We'll be glad to have a look and help you out.

Thanks!

Here are some good tips already how to be better protected :

Click me (http://boards.cexx.org/viewtopic.php?t=957)

Cheers,

[Gilou27]

Here is the requested file

[Unzy]

Thanks Gilou,

Have only HijackThis running while staying offline and fix the following :

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.couldnotfind.com/search_page.html?&account_id=129192
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.couldnotfind.com/search_page.html?&account_id=129192
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.slotch.com/?&account_id=129192
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.couldnotfind.com/search_page.html?&account_id=129192

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present

Reboot after doing so and verify if those entries are really gone by comparing them with a new HijackThis scan.

Keep us posted!

Cheers,

[Gilou 27]

I did as asked and everithing works fine now§
Many thanks for your help and congratulations for your efficiency. I'll recommand this forum :D

Cheers
Gilou

[Unzy]

Glad we were able to help, Gilou :)

Good job cleaning up

Take care!

Cheers,