Everytime I restart I get a new homepage? - Tilted Forum Project Discussion Community

jhericurl21 · 11-14-2003, 08:46 PM

everytime i get restart, when windows is starting up, i get a n error, "cannot find "file" to start a program" and i have to press OK. And after that, i notice i get 3 new favorites which most likely goto porn sites (havent checked) and i have a new homepage (ziportal.com/02), i have ran ad-adware but it hasnt fixed anything

charliex · 11-14-2003, 08:51 PM

might be the hosts file look in there for suspicious lines
its just called "hosts" its in the windows system32 drivers etc folder

then reset your homepage in ie's options

Krycheck · 11-14-2003, 08:52 PM

1. Make sure your running the latest Ad-Aware.
2. Try Spybot, sometimes it catches what Ad-Aware misses and has a nice hosts list to block sites with.
3. I take it you're using IE. Switch to Mozilla/Firebird and all will be better.
4. I don't know why I made a numbered list

jhericurl21 · 11-14-2003, 09:15 PM

only found "HOSTS.SAM" in windows folder

heyal256 · 11-14-2003, 09:36 PM

The hosts is usually located in c:\windows\system32\drivers\etc\
(as charliex mentioned) The file is called hosts with no extension. I would say that you need to run spybot http://www.safer-networking.org/ and then you should run msconfig to check what is in your startup and try disabling some of the suspicious entries (if you are not sure about what programs are useful/useless in your startup, you can check websites like this one http://www.answersthatwork.com/Taskl...s/tasklist.htm which will give you an idea of some of the programs in your startup or you can also try putting it into google for more info).

Most of the ime you get errors on windows startup about not being able to find a file from spyware or improperly removed software. This is usually solved by removing the offending entry in the startup.

Hope this helps.

jhericurl21 · 11-15-2003, 10:35 AM

nope tried all your guys suggestions and it just keep comin back

HeyAgain · 11-15-2003, 05:48 PM

You can try two programs (CoolWebShredder and HijackThis) in the link below to possibly rid of your problem. Try CoolWebShredder first, then HijackThis)

http://www.spywareinfo.com/~merijn/
CoolWebShredder

A small utility for removing CoolWebSearch (aka CoolWwwSearch, YouFindAll, White-Pages.ws and a dozen other names). Spybot S&D tends to forget essential parts of the hijack, so until it updates, you can just this to completely remove the hijack. Updated to remove the new variants once they come out.

HijackThis

A general homepage hijackers detector and remover. Initially based on the article Hijacked!, but expanded with almost a dozen other checks against hijacker tricks. It is continually updated to detect and remove new hijacks. It does not target specific programs/URLs, just the methods used by hijackers to force you onto their sites. As a result, false positives are imminent and unless you are sure what you're doing, you should always consult with knowledgable folks (e.g. the forums) before deleting anything.

Snakebyt · 11-16-2003, 10:33 AM

i have no idea how i got it, but mine was doing the same thing yesterday.. i ran adaware and its all fixed now

itchy93 · 11-16-2003, 10:36 AM

It could be a virus.

I find whenever a system's been infiltrated by spyware/viruses, I end up reformatting. Maybe it's just 'cause I'm anal and I don't believe my system will ever be clean enough after a removal, but that would be my proposed solution. Scan for viruses (Housecall is a decent web-based scanner if you don't have the software), back up all your personal files, format, and reinstall Windows.

Just a thought...

Itchy93

jhericurl21 · 11-16-2003, 04:08 PM

thx HeyAgain, CoolWebShredder did it

11-14-2003, 08:46 PM	#1 (permalink)
jhericurl21 Banned	Everytime I restart I get a new homepage? everytime i get restart, when windows is starting up, i get a n error, "cannot find "file" to start a program" and i have to press OK. And after that, i notice i get 3 new favorites which most likely goto porn sites (havent checked) and i have a new homepage (ziportal.com/02), i have ran ad-adware but it hasnt fixed anything

11-14-2003, 08:52 PM	#3 (permalink)
Krycheck Sultana ruined my evil persona Location: Los Angeles	1. Make sure your running the latest Ad-Aware. 2. Try Spybot, sometimes it catches what Ad-Aware misses and has a nice hosts list to block sites with. 3. I take it you're using IE. Switch to Mozilla/Firebird and all will be better. 4. I don't know why I made a numbered list __________________ His pants are tight...but his morals are loose!!

11-14-2003, 08:51 PM	#2 (permalink)
charliex Junkie Location: North Hollywood	might be the hosts file look in there for suspicious lines its just called "hosts" its in the windows system32 drivers etc folder then reset your homepage in ie's options

11-14-2003, 09:15 PM	#4 (permalink)
jhericurl21 Banned	only found "HOSTS.SAM" in windows folder

11-14-2003, 09:36 PM	#5 (permalink)
heyal256 Not so great lurker Location: NY	The hosts is usually located in c:\windows\system32\drivers\etc\ (as charliex mentioned) The file is called hosts with no extension. I would say that you need to run spybot http://www.safer-networking.org/ and then you should run msconfig to check what is in your startup and try disabling some of the suspicious entries (if you are not sure about what programs are useful/useless in your startup, you can check websites like this one http://www.answersthatwork.com/Taskl...s/tasklist.htm which will give you an idea of some of the programs in your startup or you can also try putting it into google for more info). Most of the ime you get errors on windows startup about not being able to find a file from spyware or improperly removed software. This is usually solved by removing the offending entry in the startup. Hope this helps.

11-15-2003, 10:35 AM	#6 (permalink)
jhericurl21 Banned	nope tried all your guys suggestions and it just keep comin back

11-15-2003, 05:48 PM	#7 (permalink)
HeyAgain Psycho	You can try two programs (CoolWebShredder and HijackThis) in the link below to possibly rid of your problem. Try CoolWebShredder first, then HijackThis) http://www.spywareinfo.com/~merijn/ CoolWebShredder A small utility for removing CoolWebSearch (aka CoolWwwSearch, YouFindAll, White-Pages.ws and a dozen other names). Spybot S&D tends to forget essential parts of the hijack, so until it updates, you can just this to completely remove the hijack. Updated to remove the new variants once they come out. HijackThis A general homepage hijackers detector and remover. Initially based on the article Hijacked!, but expanded with almost a dozen other checks against hijacker tricks. It is continually updated to detect and remove new hijacks. It does not target specific programs/URLs, just the methods used by hijackers to force you onto their sites. As a result, false positives are imminent and unless you are sure what you're doing, you should always consult with knowledgable folks (e.g. the forums) before deleting anything.

11-16-2003, 10:33 AM	#8 (permalink)
Snakebyt Psycho Location: Lubbock Texas	i have no idea how i got it, but mine was doing the same thing yesterday.. i ran adaware and its all fixed now

11-16-2003, 10:36 AM	#9 (permalink)
itchy93 Tilted Location: Wandering North America	It could be a virus. I find whenever a system's been infiltrated by spyware/viruses, I end up reformatting. Maybe it's just 'cause I'm anal and I don't believe my system will ever be clean enough after a removal, but that would be my proposed solution. Scan for viruses (Housecall is a decent web-based scanner if you don't have the software), back up all your personal files, format, and reinstall Windows. Just a thought... Itchy93

11-16-2003, 04:08 PM	#10 (permalink)
jhericurl21 Banned	thx HeyAgain, CoolWebShredder did it