Results 1 to 8 of 8
  1. #1
    Senior Member
    Join Date
    Dec 2004
    Location
    Christchurch
    Posts
    2,297

    Default http://www.msn.com/

    Don't want the above as my home page. Have tried all of the known methods to change it but it still defaults to msn.

    There are three users on this pc with Admin. title. The other two default to Google which is what I want.

    Speedy what does it appear as in HJT so it can be deleted?

    Also what would happen to the programs of the other two users if they were deleted?

    Thanks for your kind efforts sorting this replacement pc.

    Lurking.

    Ps. NEC powermate, XP SP3.

    lurks.

  2. #2
    Member
    Join Date
    Dec 2004
    Location
    NZ
    Posts
    44,851

    Default Re: http://www.msn.com/

    By the looks of it, it could be a browser hijacker thats doing it.

    Do a scan with malwarebytes below / post a log from this computer
    Last edited by Speedy Gonzales; 17-10-2008 at 10:49 AM.

  3. #3
    Senior Member
    Join Date
    Dec 2004
    Location
    Christchurch
    Posts
    2,297

    Default Re: http://www.msn.com/

    Thanks Speedy, here is log:

    Malwarebytes' Anti-Malware 1.28
    Database version: 1276
    Windows 5.1.2600 Service Pack 3

    10/17/2008 12:42:56 PM
    mbam-log-2008-10-17 (12-42-44).txt

    Scan type: Quick Scan
    Objects scanned: 57716
    Time elapsed: 7 minute(s), 38 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 1
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 1

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    HKEY_CLASSES_ROOT\adflr.adswpr (Spyware.Banker) -> No action taken.

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    C:\Program Files\ErrorExpert_setup.exe (Rogue.ErrorExpertSetup) -> No action taken.

    Lurks.

  4. #4
    Member
    Join Date
    Dec 2004
    Location
    NZ
    Posts
    44,851

    Default Re: http://www.msn.com/

    Did you remove the entry it detected?

    HKEY_CLASSES_ROOT\adflr.adswpr (Spyware.Banker)

    It looks like this belongs to a keylogger

    I mean the HJT log not the malwarebytes log

  5. #5
    Senior Member
    Join Date
    Dec 2004
    Location
    Christchurch
    Posts
    2,297

    Default Re: http://www.msn.com/

    Waiting for you to use which proram to delete it with.

    Lurks.

  6. #6
    morgenmuffel
    Join Date
    Dec 2004
    Location
    Putaruru
    Posts
    2,904

    Default Re: http://www.msn.com/

    What browser are you using, and How exactly are you trying to set the home page.

    I only ask because i have dealt with a number of Firefox/Netscape users, who try to set their homepage using the "Internet options" in the control panel (which will only set the homepage for Internet Explorer), stupid I know but I have seen some extremely bright people caught by it
    Morgenmuffel - This word needs to be a part of the english language, in fact you should use it in everyday conversation

  7. #7
    Member
    Join Date
    Dec 2004
    Location
    NZ
    Posts
    44,851

    Default Re: http://www.msn.com/

    You can remove it in malwarebytes. Bottom right click on it. After you do a scan.

    Then select that entry then remove it

  8. #8
    Senior Member
    Join Date
    Dec 2004
    Location
    Christchurch
    Posts
    2,297

    Default Re: http://www.msn.com/

    Thanks Speedy, have deleted it and running another scan.

    Nigel, IE 7 browser. Firefox is on one the other user's though.

    Interesting to note here, am back on an IBM with 320mb ram and running at 400mhz and quite frankly, it leaves the 2.9mhz 1gig ram machine for dead.

    Too many users and all running different programs no doubt must have some affect on the NEC.

    Lurking.

Similar Threads

  1. HTTP 403 error
    By k8smum in forum PressF1
    Replies: 3
    Last Post: 15-10-2004, 06:26 PM
  2. http and www. What's the dif?
    By mark c in forum PressF1
    Replies: 13
    Last Post: 26-09-2004, 09:49 AM
  3. http://gin.name.co.nz
    By hay u in forum PressF1
    Replies: 3
    Last Post: 01-04-2004, 03:48 PM
  4. HTTP 404 Not Found....
    By starfish in forum PressF1
    Replies: 10
    Last Post: 10-02-2003, 02:40 PM
  5. URL HTTP not available
    By in forum PressF1
    Replies: 0
    Last Post: 16-07-2000, 05:11 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •