Homepage Resets! - ResellerRatings Store Ratings
Comparison shop, read reviews, find savings, at ResellerRatings.com.
Comparison shop, read reviews, find savings, at ResellerRatings.com.
Comparison shop, read reviews, find savings.
 Home 
 Shopping 
 Store Ratings 
 Forums 
 Deals 
 
What are you shopping for?
Digital Cameras Plasma and LCD HDTv's iPods and Other MP3 Players PC Laptops Camcorders

Go Back   ResellerRatings Store Ratings > ResellerRatings Forums > Tech Support
Reload this Page Homepage Resets!

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
Old 02-06-2004, 06:51 AM   #1 (permalink)
Registered User
 
Join Date: Feb 2004
Posts: 9
KingLestat is on a distinguished road
Homepage Resets!
hello everyone...
well i have this problem that whenever i open my Internet Exlorer, the hompage resets to http://4-counter.com

i have always trusted Adaware and keeps it updated and scans regularly, but Adaware didnt solve my problem.

i have Norton Antivirus but its subscription is over but i somehow updated the virus defination and scanned throughly.... that didnt help....


i scanned it with Hijack this and got this log...

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://4-counter.com/?a=2
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://4-counter.com/?a=2
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://4-counter.com/?a=2
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://4-counter.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://4-counter.com/?a=2
R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = http://4-counter.com/?a=2
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://4-counter.com/?a=2
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://4-counter.com/?a=2
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://4-counter.com/?a=2
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = 192.168.1.2:8080
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - C:\Program Files\DAP\DAPBHO.dll
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - C:\Program Files\DAP\DAPIEBar.dll
O3 - Toolbar: ReGet Bar - {17939A30-18E2-471E-9D3A-56DD725F1215} - C:\Program Files\ReGetDx\iebar.dll
O3 - Toolbar: &Search Toolbar - {702AD576-FDDB-4d0f-9811-A43252064684} - C:\Program Files\Common Files\OE\toolbar.dll (file missing)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MessengerPlus2] "C:\Program Files\Messenger Plus! 2\MsgPlus.exe"
O4 - HKLM\..\Run: [RegKillElbyCheck] "C:\Program Files\Elaborate Bytes\DVD Region Killer\ElbyCheck.exe" /L RegKill
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKCU\..\Run: [MessengerPlus2] "C:\Program Files\Messenger Plus! 2\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\Run: [Windows Internet Protocol] C:\WINDOWS\system32\winproc32.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: KYESCAN.lnk = C:\Program Files\ScannerU\KYESCAN.EXE
O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Do&wnload by ReGet Deluxe - C:\PROGRA~1\COMMON~1\REGETS~1\CC_Link.htm
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
O8 - Extra context menu item: Download A&ll by ReGet Deluxe - C:\PROGRA~1\COMMON~1\REGETS~1\CC_All.htm
O9 - Extra button: Run DAP (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/s...ctor/swdir.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/18e5a3f44c8e20a...p/RdxIE601.cab
O16 - DPF: {73F0FD85-BD47-4A95-86D1-DE38860462C1} (PremiumHTML Class) - http://www.accesoplugin.com/dialerca...DialerHTML.cab
O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.co...850.1280208333
O16 - DPF: {B8A04596-1C1B-48B6-9268-F2F86C9D55BC} (jimmyloader.jimmyform) - http://bins.roings.com/roing.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab
O16 - DPF: {CEFB7B49-9652-464F-8AFD-A577C0500F39} (EGP2ECOM Class) - http://akamai.downloadv3.com/binarie...TH_pack_XP.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub...sh/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{68E9A265-EFD8-4870-A7E1-B2550460E7FB}: NameServer = 192.168.1.1,202.141.224.34,202.141.229.34



Please Help me....

KingLestat is offline   Reply With Quote
Old 02-06-2004, 07:00 AM   #2 (permalink)
Registered User
 
osprey4's Avatar
 
Join Date: Oct 2001
Location: South Jersey
Posts: 3,081
osprey4 is on a distinguished road
Have you tried SpyBot?

Here is a site with links to a number of other tools, including HiJackThis, wich might be of help in this case.

And remember, you catch diseases from skanky girls.
osprey4 is offline   Reply With Quote
Old 02-06-2004, 07:07 AM   #3 (permalink)
Registered User
 
Join Date: Oct 2001
Location: TOO close to Wash DC
Posts: 7,955
vass0922 is on a distinguished road
You definatley have some pretty shady stuff going on in there!

Definately check out spybot.

also check in Internet exploder
Tools --> Internet Options --> Settings Button --> View Objects Button.
This will bring up a window with all of the activex objects in there

Get rid of ReGet and JimmyLoader if they show up, and others that appear fishy.
__________________
<< Insert exceedingly large and overly verbose message of how 1337 you are here including full specs of every vehicle you've ever driven and PC you've owned >>
vass0922 is offline   Reply With Quote
Old 02-06-2004, 07:35 AM   #4 (permalink)
Registered User
 
Join Date: Feb 2004
Posts: 9
KingLestat is on a distinguished road
Thanks osprey for the link....

and Vass. i deleted JimmyLoader from the Obejcts... but the problem presists...
and i think there is something i should tell you,
in my Favorites list, there 5 PORN sites added, and i NEVER added them, everytime i delete them, and then the next time i open the browser, they come back...

i am now download Spybot and will let you know what happens when i am finished scanning.
Thanks
__________________
[COLOR=DarkSlateBlue][size=4][b]T[/b]hese [b]W[/b]ounds [b]W[/b]on't [b]S[/b]eem [b]T[/b]o [b]H[/b]eal

[b]T[/b]his [b]P[/b]ain [b]I[/b]s [b]J[/b]ust [b]T[/b]oo [b]R[/b]eal

[b]T[/b]here's [b]J[/b]ust [b]T[/b]oo [b]M[/b]uch [b]T[/b]hat [b]T[/b]ime [b]C[/b]annot [b]E[/b]rase...!!![/size] [/COLOR]
KingLestat is offline   Reply With Quote
Old 02-06-2004, 08:32 AM   #5 (permalink)
Registered User
 
Join Date: Feb 2004
Posts: 9
KingLestat is on a distinguished road
hello everyone
i just downloaded Spybot, updated it, scanned..... found some files EG. download Accelerator and some other and deleted them.
but the problem is still there.... it keeps on resetting.

any suggestion?
Please
__________________
[COLOR=DarkSlateBlue][size=4][b]T[/b]hese [b]W[/b]ounds [b]W[/b]on't [b]S[/b]eem [b]T[/b]o [b]H[/b]eal

[b]T[/b]his [b]P[/b]ain [b]I[/b]s [b]J[/b]ust [b]T[/b]oo [b]R[/b]eal

[b]T[/b]here's [b]J[/b]ust [b]T[/b]oo [b]M[/b]uch [b]T[/b]hat [b]T[/b]ime [b]C[/b]annot [b]E[/b]rase...!!![/size] [/COLOR]
KingLestat is offline   Reply With Quote
Old 02-06-2004, 08:42 AM   #6 (permalink)
Registered User
 
scotlandtb's Avatar
 
Join Date: May 2002
Location: Clarksville TN
Posts: 156
scotlandtb is on a distinguished road
I had a similar problem with one of the pcs I deal with here at work and I could not get rid of it with ad-aware. I eventually googled the problem and came up with this site

http://www.spywareinfo.com/~merijn/cwschronicles.html

go there download the shredder problem he has and it will solve your problem (it did for me and it cam up for 4-counter also so you should be set).

Hope this cures you

Steve
scotlandtb is offline   Reply With Quote
Old 02-06-2004, 08:58 AM   #7 (permalink)
Registered User
 
osprey4's Avatar
 
Join Date: Oct 2001
Location: South Jersey
Posts: 3,081
osprey4 is on a distinguished road
Try running HiJackThis (right-click and save this file).
osprey4 is offline   Reply With Quote
Old 02-07-2004, 03:00 AM   #8 (permalink)
Registered User
 
Join Date: Feb 2004
Posts: 9
KingLestat is on a distinguished road
Quote:
Originally posted by scotlandtb
I had a similar problem with one of the pcs I deal with here at work and I could not get rid of it with ad-aware. I eventually googled the problem and came up with this site

http://www.spywareinfo.com/~merijn/cwschronicles.html

go there download the shredder problem he has and it will solve your problem (it did for me and it cam up for 4-counter also so you should be set).

Hope this cures you

Steve

Ohhh......

Thank You SOOOO MUCH!!
That REally Solved the problem.... Thanks alot....


And Thanks Everyone who responded...... it was really kind of you, at last i have found a Forum that actually is helpful...
KingLestat is offline   Reply With Quote
Reply

« Making a Software Bundle | VCR - Computer Problem »

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

Most Active Discussions
Cyberpowerpc.com Any Good? (10)

Recent Discussions
tactical leds llc (0)
Cyberpowerpc.com Any Good? (10)
Like New Wacom 12x19 Intuos 3 +.. (1)
For Sale BFG GTX285 OC2 with 10.. (2)
www.szprice.com - any experienc.. (1)
Games, Cables, PCI cards, and m.. (5)
Buymoreshopping.com? Wigix.com (3)
I want your old/new unused pc p.. (6)
:mad: Spam At-hon (3)
Fall-Winter Cleaning Sale (1)
DON'T BUY.COM Advisory (232)
Is certifiedwatchstore.com legi.. (1)
Beware of used XBOX 360's (12)
Cheap Used Computers (0)
Reputation: Establishing Trust .. (0)

All times are GMT -6. The time now is 08:30 PM.

Contact Us - ResellerRatings - Archive - Privacy Statement - Top
home | for merchants | advertise | open letter | add a store
help/faq | privacy policy | terms of use | contact us 		ResellerRatings.com™ Copyright 1995-2007 All Enthusiast, Inc. Dealighted: Hot Shopping Deals and Bargains Posted by People