TechSpot

can't change home page. need help please

By bluedemon186
Jul 16, 2006
  1. hi. my homepage before this problem was yahoo. its still the same i internet options but when i open a browser sysprotectionpage.net opens. i have tried ad aware and spyware doctor and also tried hijack this but can't understand what to do. please guide me on this problem. here is my hijack this log.
     
  2. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Hello and welcome to Techspot.

    Download the Pocket Killbox programme from HERE. Extract it, but don`t run it yet.

    You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.


    Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html

    Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html

    In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html

    Run HJT with no other programmes open(except notepad).Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

    O2 - BHO: (no name) - {873eb32d-ae1a-4183-89bd-45a77f761be4} - C:\WINDOWS\system32\ixt3.dll

    O21 - SSODL: cinnamomum - {93ac7c30-3878-4eaa-9420-7977285df5b1} - (no file)

    Click on the fix checked button.

    Close HJT.

    Run the killbox.exe file. When it loads type the full path to the file you would like to delete in the field and check the delete file on reboot button. press the Delete File button (looks like a red circle with a white X). It will prompt you to reboot, select no until you have finished inputting the files you want to delete, only then allow it to reboot and hopefully your files will now be deleted.

    This is the filepath your need to enter into killbox.

    C:\WINDOWS\system32\ixt3.dll

    Once your system has rebooted, turn system restore back on and post a fresh HJT log.

    Regards Howard :wave: :wave:
     
  3. bluedemon186

    bluedemon186 TS Rookie Topic Starter

    hi i followed the instruction that u gave me and now i can change the homepage now. i really thankful to you and i really appreciate ur help. i'm also attaching the new hjt log as u said, i tried attaching the .txt file but every time i d it it said that i have already attached that file so i'll attach it as a word file.
     
  4. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    I`m sorry but I will not open a .doc file due to the risk of viruses etc.

    Go and read this thread HERE.

    Then, post a fresh HJT log as a .txt attachment.

    Regards Howard :)
     
  5. bluedemon186

    bluedemon186 TS Rookie Topic Starter

    i'm sorry

    i'm really sorry i didn't knew that would be the case but i tried and every time upload an .txt file it gave a msg that you have already attached this file to this thread. i tried changing the name of the file and still kept doing it. i know that in the above instructions it clearly says we can't copy paste the log but would it be alright if i did?
     
  6. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    I have deleted your last HJT log attachment.

    See if you can now attach a fresh Log. If not, you can copy and paste in this instance.

    Regards Howard :)
     
  7. bluedemon186

    bluedemon186 TS Rookie Topic Starter

    it did allow me to attach it this time. thank you
     
  8. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    The same two entries I asked you to fix are still in your latest HJT log.

    You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.


    Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html

    Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html

    In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html

    Run HJT with no other programmes open(except notepad).Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

    O2 - BHO: (no name) - {873eb32d-ae1a-4183-89bd-45a77f761be4} - C:\WINDOWS\system32\ixt3.dll

    O21 - SSODL: cinnamomum - {93ac7c30-3878-4eaa-9420-7977285df5b1} - (no file)

    Click on the fix checked button.

    Close HJT.

    Rub HJT and click on the config button, followed by the misc tools button. Click the delete file on reboot button and browse to C:\WINDOWS\system32\ixt3.dll. Click on the ixt3.dll file and click open. You will be prompted to restart your computer, click yes.

    Once your system has rebooted, turn system restore back on and post a fresh HJT log.

    Regards Howard :)
     
  9. bluedemon186

    bluedemon186 TS Rookie Topic Starter

    sorry for late reply

    i followed the instruction that u gave me but i could not find any of the files that u asked me to delete.
     
  10. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Please post a fresh HJT log.

    Regards Howard :)
     
  11. bluedemon186

    bluedemon186 TS Rookie Topic Starter

    here is the fresh log
     
  12. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Your HJT log is now clean.

    However, if you`re still having problems, I`d like you to download and run these three tools. Please read the instructions for using each tool.

    Tool1 Tool2 Tool3

    Please let me know how your system is running after running the above tools.

    Regards Howard :)
     
  13. bluedemon186

    bluedemon186 TS Rookie Topic Starter

    sorry haven't been able to reply. i ran all the three tools but they did not find any thing but still i'll see how my system works and will let u know in couple of days. and once again thank u very much.
     
  14. Shadowhawk

    Shadowhawk TS Rookie

    bluedemon186,
    There is an app that removes BHOs called Ad-Aware SE v1.06r made by Lavasoft, and can be downloaded here http://www.lavasoft.com/
    This app will request to "immediately update" during install... Once updated, let it do a complete scan to find the BHO that's taken over your web-homepage.
    Once the scan is completeand the items have ben checked & removed, bring up the page you want, go up to Tools, then down to Internet Options, under the General tab, click the Use Current Page button, then click Apply and OK.. <page is now set again> :).e
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...