Problem, Can't edit/change IE home page

Discussion in 'Malware Help (A Specialist Will Reply)' started by DrPepper, May 21, 2005.

  1. DrPepper

    DrPepper Private E-2

    I can't edit/change my IE home page. Have tried regedit and changing it thru the IE Properties panel. It imediately changes back to 'RCN'. The two entries I edit in the Registry are "Local Page" and "Start Page". I'm running XP Professional w/ SP2 & the latest Microsoft patches. Run Symantec Anti Virus and Firewall and Ad-Aware w/ VX2 Cleaner Plug In. I have performed 'all' the steps in the 'Read Me First Before Asking For Support' document. Still have the same problem. Trend Micro scan ran w/ no problems. Couldn't run the Symantec Security Check, it just wouldn't run. I did do a full anti virus scan w/ no problems. Ran Spybot, CWShredder, Kill2me, and AboutBuster, McAfee AVERT Stinger, no problems found. Can someone provide another direction? I appear to be about out of options.
     
  2. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    http://www.majorgeeks.com/images/grenade.gif Download HijackThis 1.99.1

    http://www.majorgeeks.com/images/grenade.gif Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    http://www.majorgeeks.com/images/grenade.gif Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the ZIP file as your backups will not be safely stored.

    http://www.majorgeeks.com/images/grenade.gifBefore running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    http://www.majorgeeks.com/images/grenade.gifRun HijackThis and save your log file.

    http://www.majorgeeks.com/images/grenade.gif Post your log as an ATTACHMENT to your next post. (Do NOT copy/paste the log into your post as it will be removed).

    http://www.majorgeeks.com/images/grenade.gifNeed help with HJT? See this thread: NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting
     
  3. DrPepper

    DrPepper Private E-2

    I have attached the HJT log file.
     

    Attached Files:

  4. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Your HJT log is clean!

    You have some restrictions as per the entry below added from Spybot S&D. You will need to disable these restrictions.

    As far as everything else you look clean to me. Are you having any further problems?

    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
     
  5. DrPepper

    DrPepper Private E-2

    Thanks for the feedback. No other 'problems'. But can you give me any direction on the 'restrictions in the IE Control Panel'?? I've searched every option under IE Properties and don't see where I have something set that would prevent me from editing the Registry. Any suggestions??
     
  6. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    These restrictions are added from Spybot S&D. They are located in Spybot S&D not the in IE Properties. Load Spybot S&D, boot into Advanced Mode and remove the restrictions. Go into Tool, IE Tweaks, and uncheck "Lock IE start page setting against user changes (current user)."
     
  7. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    In SB S&D goto advanced mode > Settings > IE Tweaks and untick 'Lock IE start page'
     
  8. DrPepper

    DrPepper Private E-2

    Went to SB S&D as directions. None of the lock boxes were checked. I don't think SB S&D is causing my problem. I had this problem before I installed SB S&D. The issue may be in the IE Control Panel / Properties, but I don't know where. I've looked at every setting I can find and don't see anything that I think would cause the IE Home Page to be locked. I'm still scratching my head.
     
  9. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Its from Spybot S&D, was any of those 3 boxes checked?

    Also, scan with HJT and have check those O6 entries, remove them and see if they come back.
     
  10. DrPepper

    DrPepper Private E-2

    I removed the HJT 06 entries. The06 entries didn't come back. But I still can't change my IE Home Page. I tried regedit and IE Tools to change the home page. Can anyone think of anything else I can try??
     
  11. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Dunno if you have tried this in the registry enter regedit and find your way to HKEY_CURRENT_USER\Software\Policies\Microsoft\InternetExplorer\ControlPanel then click on the General Tab.

    In the right pane if it is set to 1, right click it and modify it to 0


    also http://support.microsoft.com/default.aspx?scid=kb;en-us;320159&e=10313 follow resolution pt 6


    could have bet a $1 on it being SB S&D tho
     
  12. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    SpywareBlaster also has the ability to place restrictions like this. I'm just passing by. But did anyone check if the user is running SpywareBlaster.
     
  13. DrPepper

    DrPepper Private E-2

    Not running spywareblaster.

    Followed path HKEY_CURRENT_USER\Software\Policies\Microsoft\InternetExplorer\ControlPanel
    BUT, under InternetExplorer, don't have 'ControlPanel'. In the right panel just have (Default) Type=REG_SZ. Data=(value not set)

    I'll try the link to Microsoft and see if that is any help.

    BTW, THANKS for the suggestions. Keep them coming. I'll be sure to let everyone know when (if) I get this resolved without removing IE and re-installing.
     
  14. DrPepper

    DrPepper Private E-2

    Just tried the link to Microsoft support. The link won't work. ???
     
  15. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Try the below:

    Copy the contents of the Quote Box below to Notepad. Then click File and then Save As. Change the Save as Type to All Files. Name the file fixit.reg and then click save. (make sure you save it somewhere you can find it. Saving it to your Desktop may make that easy.) Then double-click on the fixit.reg file on your desktop (or locate it with Windows Explorer and double click on it if not saved to the Desktop) and when it prompts to add into the registry, click YES!

    Let me know if that helps. If it does not, I would have to assume that your Ad-watch from Ad-Aware is blocking the changes and you will have to disable it in order to make the fix.
     
  16. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

  17. DrPepper

    DrPepper Private E-2

    The problem is solved. It was Ad-Watch. It was preventing me from editing the registry and the way I had it configured, it wasn't notifying me, ie asking me if I really wanted to apply the change to the registry.
    THANKS to everyone who was trying to help me. You guys are GREAT.
     
  18. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Well..I learned something today LOL!

    Should have considered this as a possibility. Dang, now I dont like Adwatch.

    LOL! :p

    Glad you got it fixed
     
  19. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I new it had to be Ad-watch!
     
    Last edited by a moderator: May 26, 2005

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds