Re: Google and Yoogee

From: Buz [MSFT] (buzb_at_online.microsoft.com)
Date: 12/29/03 

Date: Mon, 29 Dec 2003 16:02:22 -0500

320159 Home Page Setting Changes Unexpectedly, or You Cannot Change Your
Home
http://support.microsoft.com/?id=320159

You may want to do an AV scan and also run some ad removal type of software
such as adaware or spybot.

Some web pages will automatically and somewhat maliciously change your home
page or
configured search page for Internet Explorer wioht little or no interaction
from
you.

Here is some javascript that does this:
-------------------------------
document.body.style.behavior='url(#default#homepage)';
document.body.setHomePage('http://www.searching.net'); }
-------------------------------

I did some quick playing around and found that you can simply modify the
permissions on the following registry key:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
This is where the search and the home page entries are stored. Unfortunately
the
"Main" registry key houses many IE settings. So those wont be able to be
changed
either.
I removed System-Full Control and Administrators-Full Control and left my
own
account with just Read Access. After making these changes I was not able to
change
the search or home page (called Start Page in registry).

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

"Michael T" <tracit99@msn.com> wrote in message
news:339901c3ac7d$7e2ec670$3101280a@phx.gbl...
> Help,
>
> When I use the search assitance feature of IE address bar,
> I get hijacked and redirected to either a Google or Yoogee
> website. I have searched and removed any references to
> Google and Yoogee from my hard drives and the registry. I
> use Zone Alarm Pro and have set IE to block all 3rd party
> cookies and to prompt for 1st party cookies. I have added
> both google.com and yoogee.com to my blocked per site list
> in the Privacy tab of Internet Options. And still I am
> being hijacked. Anyone who has seen this problem and has
> any suggestions I would be eternally grateful.
>
> Michael T

Relevant Pages