Re: Crush'Em2.0 & Puzzl'Em1.0
From: Sandi - Microsoft MVP (sandi_hardmeier_at_mvps.org)
Date: 05/29/04
- Next message: Sandi - Microsoft MVP: "Re: Internet Explorer Problem"
- Previous message: Sandi - Microsoft MVP: "Re: homepage and start up"
- In reply to: Arthur: "Crush'Em2.0 & Puzzl'Em1.0"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sat, 29 May 2004 13:09:08 +0800
This advice covers three types of home page locking - hijacking (by web
sites), hijacking (by viruses) and locking (by ISPs when you install their
software, and computer manufacturers)
Malware:
If your computer home page is set to about:blank against your wishes, or any
other page, you have a malware problem. For advice on getting rid of it,
check out the link below:
http://inetexplorer.mvps.org/data/tshoot.htm
If you are using Spybot S&D, check your 'immunize' settings which may be
locking the home page.
Microsoft links to problems with the above sites are as follows:
PassThisOn.com Home Page Appears When You Start Computer [Q309313]
http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q309313
Cannot Change Default Home Page Setting from Webcombo Site [Q302459]
http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q302459
Home Page Setting Changes Unexpectedly, or You Cannot Change Your Home Page
Setting
http://support.microsoft.com/default.aspx?scid=kb;EN-US;320159
In addition, you may discover that browser.secondpower.com is being added to
your homepage URL. This link has an Uninstaller:
http://www.secondpower.com/customer.html
Prevent Hijacking:
First, update to Internet Explorer 6. Most sites that try to hijack your
home page will now trigger a 'do you want to do this' warning message that
lets you stop the hijacking. The sneaky background activex downloads that
are often used by hijack sites to install spyware will also trigger a 'do
you want to do this' install window.
Please see this link for advice on security fixes that can help prevent such
hijackings:
http://inetexplorer.mvps.org/Darnit.htm#hijackings
Make sure that your antivirus is completely up to date.
There is a clever little shareware programme that can help stop your home
page being changed; it seems to work well but tends to trigger when you
change your home page manually the next time that you start IE - the
programme makes it much easier to take back control of your home page
settings:
http://www.pjwalczak.com/spguard/
If you are using Spybot S&D you can lock your home page using the 'immunize'
option.
Manufacturer/ISP Locking:
Some computer manufacturers and suppliers of internet access set IE to their
home page and lock this setting via the registry. Hijackers use exactly the
same trick. The locking is done using registry settings as per the
following:
Home Page Setting Changes Unexpectedly, or You Cannot Change Your Home Page
Setting http://support.microsoft.com/default.aspx?scid=kb;EN-US;q320159
Specific registry settings affected are:
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control
Panel] -
DWORD "HomePage"=dword:00000001 (grays out the whole section)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer]
-
DWORD "NoSetHomePage"=dword:00000001
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet
Explorer\Restrictions] -
DWORD "NoSetHomePage"=dword:00000001
Regarding your internet options issue, there are a couple of possibilities
here.
Search your system for the DWORD (registry value) 'nobrowseroptions'
If the value of 'NoBrowserOptions' is set to 1x0 ... remove the value or set
to 0 (0x0) to return the system to 'normal' operation.
Remember to always back up your registry before making any changes, and
reboot when you are finished to set the changes. For your information, some
links about working in the registry are noted below:
How to Back Up the Registry in Windows 98 [Q256419]
http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q256419
If no joy, a file called inetcpl.cpl (Internet Control Panel) file may be
damaged or corrupt and needs to be replaced. Try replacing it with system
file checker.
If you installed Spybot, turn off "protect IE control panel".
-- Hyperlinks are used to ensure advice remains current _______________________________________ Sandi - Microsoft MVP since 1999 (IE/OE) http://inetexplorer.mvps.org/ Arthur wrote: > Today, my EZ Trust anti-virus detected several infected > files and supposedly deleted them. > > When I tried to access Internet Options from the Tools > menu, I got a message that the operation had been > cancelled due to restrictions in place on my computer. > > Then I checked the install/unistall utility on Control > Panel and found two unknown entries; Crush'Em2.0 and > Puzzl'Em1.0Beta2. When I tried to uninstall the entries, a > message popped up saying "could not open Install.log > file." > > Any help will be appreciated
- Next message: Sandi - Microsoft MVP: "Re: Internet Explorer Problem"
- Previous message: Sandi - Microsoft MVP: "Re: homepage and start up"
- In reply to: Arthur: "Crush'Em2.0 & Puzzl'Em1.0"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
