Hijacked Homepage - and can't change it!

From: Peteroid (peter_oliphant_at_msn.com)
Date: 08/15/05


Date: Sun, 14 Aug 2005 15:08:11 -0700


***I figure this is a MS Security issue, hence why I posted this here. If
this is the wrong place, please point to to the correct place. Thanks! ***

I was surfing the web when all of a sudden viruses (viri, but it looks
funny) are detected. I tried to elliminate with AVG (which detected them),
but not all were apparently removed.

First, I have a two-screen system, and one of these screen was changed to an
ad for 'RazeSpyware'. I was only able to remove this by downloading their
demo and running it.

Then I openned my browser, and it comes up with a page telling me I have a
security risk instead of my MSN.com home page. This page has info about my
system on it, such as keywords, and links to a company called
"Evidence-Eliminator.com".

I've tried to change my homepage, but it always comes back to this hijacked
page if I hit the homepage icon or open up a new browser. It seems to be
getting this from my own machine, as this appears in the address field:

res://C:\WINDOWS\system32\shdocvn.dll/errorAPI.htm#ID=PX8594;

I've tried changing the homepage both by drag-and-drop and by going into the
'Tools : Internet Options". I've applied and just exited, in all cases the
homepage reverts back to their 'ad'.

I've run my (already owned) anti-spyware and anti-virus software sweepers,
they report nothing is wrong. And, whatever they did, it cleared all
previous 'restore points', so couldn't even solve it that way.

"Evidence-Eliminator.com" is England based. Isn't this blackmail? Buy our
software (which will likely return control of my homepage to me) or we won't
let you change your homepage?

FYI:

Operating System: Win XP Pro 5.1
Browser: MS IE 6.0.2900.2180.xpsp_gdr.050301-1519
Update Versions: ; SP2;

I have most recent MS updates installed.

Basically I'm looking for a way to return my homepage control. Any ideas?
And don't you think MicroSoft should have a word with these guys (my
homepage was MSN.com)? They also almost slander MS in regards to what they
say.

And to show how awful "Evidence-Eliminator.com" is, this is their disclaimer
(at bottom of my 'new homepage'):

"The information is provided 'as is' without warranty of any kind. But, if
you don't follow our recommendations & don't use 'required software', we
will disclaim all warranties, either expressed or implied, including the
warranties of merchantability and fitness for a particular purpose. In no
event shall we be liable for any damage whatsoever including direct,
indirect, incidental, consenquential, loss of business profits or special
damages, even if we have been advised of the possibility of such damage."

The 'required software' in the above is a link to buy their software.

Again, I didn't go to them, they hijacked my homepage via a virus of some
kind while surfing totally unrelated content.

 Help!!!

[==Peteroid==]



Relevant Pages

  • Re: Microsoft Browser Under Scrutiny
    ... I already know this, I subscribe to Microsoft Security Updates, and I have ... especially Outlook and Internet Explorer. ... > ubiquitous Internet Explorer browser. ...
    (microsoft.public.windowsxp.general)
  • Re: Microsoft Browser Under Scrutiny
    ... I already know this, I subscribe to Microsoft Security Updates, and I have ... especially Outlook and Internet Explorer. ... > ubiquitous Internet Explorer browser. ...
    (microsoft.public.windowsxp.basics)
  • Re: Microsoft Browser Under Scrutiny
    ... I already know this, I subscribe to Microsoft Security Updates, and I have ... especially Outlook and Internet Explorer. ... > ubiquitous Internet Explorer browser. ...
    (microsoft.public.windowsxp.newusers)
  • Re: [Full-Disclosure] RIP: ActiveX controls in Internet Explorer?
    ... > source of security holes in Internet Explorer. ... > judgment against Microsoft for patent infringement. ... > Internet Explorer rather than pay Eolas any more money. ... > Internet Explorer browser looks like the perfect time to put pressure on ...
    (Full-Disclosure)
  • Re: Critical error 101 on MS AntiSpyware install
    ... Not to mention everyone and their brother that is on the firefox high ... low and behold - Windows Help opens up - hum, ... because the one thing that was on on my little browser was the little ... Just use windows security, and not ignore ...
    (comp.security.firewalls)