pwol
1 Copper

Home Page Hijacked

My mother board was replaced by a Dell tech. and my hard drive was reformatted, then reinstalling windows   XP and going through the many updates from microsoft, somewhere in the process my browser IE7 home page has become hijacked with the following address

http://www.msn.com/404.aspxaspxerrorpath=/runonce2.aspx " . Norton was active during the updates but that didn't seen to matter. When I open my browser I get the hijack page but when I click my home page menu button I get the page I want. Trying Internet options to correct the problem doesn't work.   

 

 Please, how can I rid my computer of this problem?

0 Kudos
13 Replies
joe53
5 Tungsten

Re: Home Page Hijacked

Welcome to the forum pwol:

 

It is possible that your Norton AntiVirus (NAV) security has locked your home page (rather than it being hijacked by malicious malware).

 

The info below refers to NAV 2006, but might still apply:

 

Certain versions of  NAV lock the homepage. To disable:
Open NAV > Options > under the Internet section, click on Home Page Protection.
Uncheck all three options:
- "Turn home page protection on"
- "Block all attempts to change my homepage"
- "Alert me when my home page loads"

 

Then try changing to you regular home page, using the usual internet options technique. Let us know how it goes- there are other things to try.

Message Edited by joe53 on 08-17-2008 02:44 PM

_________________________________________


Dell Forum Member since 2,000


 Use OpenDNS   MalwareBytes' Anti-Malware Free


Windows 7/sp1 (64- Bit): Malwarebytes 3.x Premium, Windows Firewall, WinPatrol PLUS, Emsisoft Emergency Kit Free and HitmanPro Free (on-demand scanners), OpenDNS, MVPS Hosts file, SpywareBlaster, Pale Moon web browser, Sandboxie, CCleaner Free.


Windows 10 Pro (64- Bit): Same protection plus Windows Defender AV.


"In the future, everyone will be anonymous for 15 minutes" - Banksy

0 Kudos
pwol
1 Copper

Re: Home Page Hijacked

Hi joe53,

 

thank you for your reply.

 

NAV 2008 does not have the options that you listed and that I could find. The closes thing I could see was in the browser intrusion prevention options and I had no luck when they where unchecked. Anyway I have previously chatted with a Norton tech and he said that NAV was not responsible for my problem, but they could fix it for $99us. 

0 Kudos
joe53
5 Tungsten

Re: Home Page Hijacked

Heavens - don't pay Norton for what may be their problem! (And I'm assuming you have no other security programs loaded that might lock your home page- there are many).

 

In any event, try this first:

 

Reboot into Safe Mode, and change your homepage in Control Panel:

 

- In Safe Mode, open Control Panel, click on Internet Options>General tab
- In the address window(IE6) or Home page (IE7), type the desired URL ( use the full http://<homepage> format)
- Click [OK]
- Re-boot into windows.

 

 

_________________________________________


Dell Forum Member since 2,000


 Use OpenDNS   MalwareBytes' Anti-Malware Free


Windows 7/sp1 (64- Bit): Malwarebytes 3.x Premium, Windows Firewall, WinPatrol PLUS, Emsisoft Emergency Kit Free and HitmanPro Free (on-demand scanners), OpenDNS, MVPS Hosts file, SpywareBlaster, Pale Moon web browser, Sandboxie, CCleaner Free.


Windows 10 Pro (64- Bit): Same protection plus Windows Defender AV.


"In the future, everyone will be anonymous for 15 minutes" - Banksy

0 Kudos
pwol
1 Copper

Re: Home Page Hijacked

No way was I ever considering to paying Symantec that price.

 

I tried Safe Mode with no success my home page is still hijacked. 

0 Kudos
joe53
5 Tungsten

Re: Home Page Hijacked


@pwol wrote:

 

I tried Safe Mode with no success my home page is still hijacked. 


Assuming you mean you were able to boot into safe mode, but unable to get the change to stick, then your remaining options are listed here:
http://naut.homestead.com/files/locked/locked.html

 

If none of them work for you, the last almost certainly will (#3: HijackThis logfile option).

_________________________________________


Dell Forum Member since 2,000


 Use OpenDNS   MalwareBytes' Anti-Malware Free


Windows 7/sp1 (64- Bit): Malwarebytes 3.x Premium, Windows Firewall, WinPatrol PLUS, Emsisoft Emergency Kit Free and HitmanPro Free (on-demand scanners), OpenDNS, MVPS Hosts file, SpywareBlaster, Pale Moon web browser, Sandboxie, CCleaner Free.


Windows 10 Pro (64- Bit): Same protection plus Windows Defender AV.


"In the future, everyone will be anonymous for 15 minutes" - Banksy

0 Kudos
pwol
1 Copper

Re: Home Page Hijacked

The change in safe mode did not stick. I posted the Hijackthis logfile please have a look, your help is appreciated.

 

Thanks.

0 Kudos
joe53
5 Tungsten

Re: Home Page Hijacked

pwol:

 

I see you posted your HJT logfile in the HJT forum. Please be patient waiting for a reply, as the experts there are swamped with requests. It might take a day or two.

 

Since you are using IE7, one thing worth trying while you wait is to temporarily disable all the IE7 browser add-ons. One of them might be causing your problem. To do this, simply right-click your IE7 icon on your desktop, and select Start Without Add-ons. When IE7 opens, try changing your home page via Tools>Internet Options>General tab. Make sure you click Apply after making the change. Close IE7.

 

Re-open IE7, again without Add-ons. If it opens to your desired Home page, then one of your Add-ons is responsible.

 

Best of luck!

_________________________________________


Dell Forum Member since 2,000


 Use OpenDNS   MalwareBytes' Anti-Malware Free


Windows 7/sp1 (64- Bit): Malwarebytes 3.x Premium, Windows Firewall, WinPatrol PLUS, Emsisoft Emergency Kit Free and HitmanPro Free (on-demand scanners), OpenDNS, MVPS Hosts file, SpywareBlaster, Pale Moon web browser, Sandboxie, CCleaner Free.


Windows 10 Pro (64- Bit): Same protection plus Windows Defender AV.


"In the future, everyone will be anonymous for 15 minutes" - Banksy

0 Kudos
xcator
3 Zinc

Re: Home Page Hijacked

http://support.microsoft.com/kb/556052

 

registry changes:


[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"RunOnceComplete" =dword:00000001
"RunOnceHasShown"=dword:00000001

 

or this:

http://support.microsoft.com/kb/945385

 

 

Message Edited by xcator on 08-23-2008 09:53 PM
0 Kudos
pwol
1 Copper

Re: Home Page Hijacked

Thank you xcator for the solution and to Joe53 for your help.

 

Bravo.

0 Kudos