Browser Take Over's?

[tomteeth]

Hello Everyone: Quite often i get this (it seems) the same website trying to take over my home page, can someone tell me why and maybe how to permanently keep it deleted, if possible? Here is a partial list caught by Spyware Guard>> BROWSER HIJACK ALERT - BROWSER PAGE CHANGED
On 14:03:04 03/07/2004 a browser page change was detected.
Registry Location: HKCU\Software\Microsoft\Internet Explorer\Main\
Value Name: Search Page
Old Value: http://red.clientapps.yahoo.com/customize/ie/defaults/sp/ymsgr/*http://www.yahoo.com
New Value: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
User Action Taken: RESTORE OLD VALUE

--------------------------------------------------------------------------------
BROWSER HIJACK ALERT - BROWSER PAGE CHANGED
On 14:03:13 03/07/2004 a browser page change was detected.
Registry Location: HKLM\Software\Microsoft\Internet Explorer\Main\
Value Name: Search Page
Old Value: http://red.clientapps.yahoo.com/customize/ie/defaults/sp/ymsgr/*http://www.yahoo.com
New Value: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
User Action Taken: RESTORE OLD VALUE

--------------------------------------------------------------------------------
BROWSER HIJACK ALERT - BROWSER PAGE CHANGED
On 14:03:19 03/07/2004 a browser page change was detected.
Registry Location: HKLM\Software\Microsoft\Internet Explorer\Main\
Value Name: Default_Page_URL
Old Value: http://red.clientapps.yahoo.com/customize/ie/defaults/stp/ymsgr*http://my.yahoo.com
New Value: http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
User Action Taken: RESTORE OLD VALUE

--------------------------------------------------------------------------------
BROWSER HIJACK ALERT - BROWSER PAGE CHANGED
On 21:59:02 03/07/2004 a browser page change was detected.
Registry Location: HKLM\Software\Microsoft\Internet Explorer\Main\
Value Name: Default_Search_URL
Old Value: http://red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr/*http://www.yahoo.com
New Value: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
User Action Taken: RESTORE OLD VALUE Thanks Tom

[puff-m-d]

tomteeth,

It seems you have been Hijacked.... Go here http://www.wilderssecurity.com/showthread.php?t=15913 and follow the instructions.

Regards,
Kent

[tomteeth]

Kent: Thank You, for the website, but these are only attempts to Hijack my browser, i have my home page locked in and attempts are made but never finalize! I still have my Home Page in tact! But i wanted to know is, who is this that is trying to Hijack me, it seems like the same website, do you agree?

[puff-m-d]

You probably already have the hijacker on your system and it is trying to hijack your homepage. The only way to know for sure is to follow the instructions in the link I posted.

Hope this helps....

Regards,
Kent

[tomteeth]

Ok, Thanks, I will see what i can come up with!