Results 1 to 9 of 9

Thread: homepage hijacked by: http://awesomehomepage.com/newsletter.php?list=positivethoughts

Hybrid View

Previous Post Previous Post   Next Post Next Post
  1. #1
    Junior Member
    Join Date
    Aug 2007
    Posts
    23

    Default

    an email from detections AT spybot.info suggested this:
    Please fix the follwing items with hijackthis:

    Running processes:
    C:\Program Files\CleanMyPC\Registry Cleaner\RCScheduler.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
    PHP Code:
    [url]http://awesomehomepage.com/newsletter.php?list=positivethoughts[/url] 
    O4 - HKCU\..\Run: [Registry Cleaner Scheduler] "C:\Program
    Files\CleanMyPC\Registry Cleaner\RCScheduler.exe" /startup

    Please make a fresh system start after fixing these items.


    However after reboot, homepage is still hijacked
    Last edited by tashi; 2007-08-30 at 21:59. Reason: Disabled email link and R0 url

  2. #2
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,964

    Default

    Hi elvira,

    Let's take a look from a different angle, please follow the procedure in this link:
    "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance)
    Please use the link and instructions there for a Trend Micro HJT log.

    Then start your own thread in the Malware Removal Forum

    A helper will advise you when available. Best regards.
    Last edited by tashi; 2007-08-30 at 22:19. Reason: clarify
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  3. #3
    Junior Member
    Join Date
    Feb 2008
    Posts
    1

    Default hijacked

    I too, have been hijacked by awesome home pages.I have the latest updates, and, I scan a couple of times a week. I still can't get rid of it.
    larry martin

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •