My homepage is being stolen from me.

[Eonfire]

Hello there hi council of registry wizards and wizardesses,

I have a problem with my homepage, i'm using the WindowsMe OS and the page keeps changing itself to search-space.com.

Everytime i change it back it just re-appears again, my own fault for turning my firewall off the other night, learning from my mistakes still. :p

Does anyone know what part of the registry i need to go to in order to delete the key that this search-space thing is in?

(also sorry Ms Mittens or whoever if this is in the wrong forum.)

[MrLinus]

Umm... You might want to install a Spyware detection software. In the meantime, following these instructions (http://www.securemost.com/articles/trou_3.htm)

[/edit]

Moved this from GCC to Spyware/Adware.

[houdinii]

Check out this thread:

http://www.antionline.com/showthread.php?s=&threadid=254263

I posted a link to CoolWebSearch Shredder, which will probably take care of your browser hijack.

[w0lverine]

i had the same problem sometimes the home page changes to search-space.com and some time to msn.com althow i had Ad-aware 6.0 and AVG installed but they both were not able to fix the problem. i used CWShreadder http://spywareinfo.com/ to remove the infection

[Computernerd22]

I have a problem with my homepage, i'm using the WindowsMe OS and the page keeps changing itself to search-space.com.

The reason it keep's changing because you have spyware installed on your PC. When you have spyware on your PC and everytime you reboot the computer it get's reactived to stop this from happening Either download spybot or seek-and-destory both of these can be found at www.download.com find the spyware and remove it. After you removed the spy ware open up Internet Explorer go to tools, internet options, on the general tab type the site you want to set as your homepage click apply then OK. Hope this helps. Now as far as the firewall you didnt mention the manufacture of it if the firewall has a feature toblock all 3rd party cookies you should set it to that.

[Eonfire]

Again sorry Ms Mittens! :rolleyes: (second thread made, second thread in the wrong forum)

Thanks people but i already have spybot and ad-aware installed. I've ran two checks but haven't found anything so i'll run another with each and see if i find anything this time. The shredder sounds perfect, i've used one before and it worked but this time i don't know where the damn key is so i'm stuck. I even ran a search of the full registry but found nothing related to search-space!

If i use a shredder (spybot shredder i can use that.) i need the location of the key, i don't know if it's a CLSID or not but it needs to be located before i can shred, any ideas?

[MrLinus]

Eonfire, have you looked at CWShredder?

[moxnix]

Eonfire, Use CWShredder found here: http://www.merijn.org/downloads.html

[Eonfire]

Thanks MsMittens and Moxninx i'll take the advice this time and download the CW shredder. Will post back with the results. :D

[Eonfire]

Yes it worked, thanks for the advice and the link, i'll try your advice straightaway next time instead of thinking i can do it myself!

[the_JinX]

if the CWshredder doesn't work, try HijackThis, found on the same site..

http://www.merijn.org/downloads.html

[jinxy]

Eonfire, the people here no what they are talking about. Next time you ask for advice, take it my friend. But then analize that advice and where it leads and learn.

[Eonfire]

:confused:

Hi there, i'm back again. Thaks Jinxy i'll remember to take the advice next time, which could be this time because now i have NLS files in my computer in C:/windows/system that i can't delete because i get access denied:source file may be in use.

I can't delete them and there are loads of image files that just appeared called CP_1250 and CP_857 etc etc. I think there's 32 of them and it's pretty worrying because a) i'm paranoid anyway, and b) they just appeared there one day so i dunno if it's part of an automatic update or i've been hacked.

Not raising the "Oh i've been hacked!" alarm bells or anything, just seeking any advice on the matter.

[moxnix]

Are you using an older version of a netscape browser? These files are needed by some of the older versinions, 3.0 and below.
Chinise language translations also use the same type of files.
All in all, I don't think you have to be worried about them being on your computer. I would be more interested in what you are useing that created the files in the first place.

[Eonfire]

Oh, cool thanks for that. I'm pretty sure i'm using internet explorer 6.0. Where's the best place in my registry to start learning stuff about it? Controls and then settings? Just wondering because it would be interesting to find out how some of you people started out learning about your OS. I'm using WindowsMe at the moment and all i'm doing is just looking around and opening different things up. Not really sure what most of it is though. I read a thread about hacking here that said that the best thing to do is to look for flaws in your OS and then start 'tweaking' it so it's more secure, but i'm really not sure how to go about it.

(sorry i realize this is going off topic now.)