again hijacked home page

[bases]

usually have my homepage to msn.com

but www.vroomsearch.com takes over

so reset to msn.com

so i got the hijachthis software,,and removed where it has vroomsearch
still not working

how can i get this back to normal and keep my homepage from attacked
thanks

 

[KMA]

It depends on what browser you are using:

If you are using Internet Explorer, click on tools (in the upper portion of your screen), then click Internet options. In the homepage section, type the address you want to use as your homepage, then click "OK". Then click "Ok" and you are done.


If you are using Netscape Navigator, Using the Netscape Edit menu, go to Preferences. Within Preferences, select the Navigator category. In the Navigator Starts With section, choose Home Page. Type whatever address you want to use as your homepage in the Home Page Location box, and click on OK.


Vroom Search Page becomes part of your search engine because YOU either:

Clicked the 'make start page' link on the main Vroom Search Page webpage.

Or, you downloaded and installed one of their MANY software applications. In the terms and conditions of any of their software products it is clearly stated that they grant you a free license to use the software and by installing the software on your computer you agree to use thier search services in your web browser. Any and all changes made to your system are clearly stated in the terms and conditions and are fully un-installable via a separate uninstall program whic you can usually find on their homepage if yah look closely.

 

[KMA]

Are yah running Kazza???

 

[bases]

hi

hi

hi thanks for reply
not using kazzaa

internet explorer
windows 2000

yes even with changing the home page ...porn sites jump on site, meaning when i want to visit a specific site at times,,porn site comes up and i delete...but that www.vroomsearch.com still goes to home page
not sure what software i would have installed for i to use their homepage on my site....but went to the site as you mentioned and now it says password needed to go to www.vroomsearch.com
thanks

 

[Captain Crunch]

Bases, I don't mean to hijack your thread, but I got a question for KMA.

When I go to Start-->Explore and then I click on Temp, there is a bunch of crap in there that looks like Spyware (bundletracker for one). Not sure what the rest of it is, but my question is, can I just delete everything that is in there w/o it effecting the way my computer runs. Is it just stuff I have accumulated from the Disney and Nickleodeon sites that I go to?

Thanks for your help.

 

[bsucards]

Bases, I don't mean to hijack your thread, but I got a question for KMA.

When I go to Start-->Explore and then I click on Temp, there is a bunch of crap in there that looks like Spyware (bundletracker for one). Not sure what the rest of it is, but my question is, can I just delete everything that is in there w/o it effecting the way my computer runs. Is it just stuff I have accumulated from the Disney and Nickleodeon sites that I go to?

Thanks for your help.

Temp files can be deleted, sometimes what it does is help load pages quicker if you have loaded them before, but most of the time they are in temporary internet files.


As for the original poster, sounds like you should check out the latest spyware tool removal that people are using:

http://www.download.com/Webroot-Spy-Sweeper/3000-8022_4-10301356.html

Also, you might be best to install it run it, and then reboot into safe mode. (Hit F8 before windows boot screen)

Manually chaning your home page is not going to work, the spyware is set in the registery for sure. You might have to use a couple programs to knock it out

 

[Captain Crunch]

Thanks BSU for the reply. I figured I could beings they were in the temp file, but wanted to hear from one the board experts before going ahead with it.

Bases, I run Spysweeper, along with quite a few other people here, and it seems every one has had good luck with it and solved a lot of their computer problems. You can try it for free for 30 days if you like, but I bought the yearly subscription, run it about once a week, and I am problem free.

 

[cisco]

You need to download Highjackthis . Your log will probably look like this:

C:\hijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.vroomsearch.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.vroomsearch.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.vroomsearch.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.vroomsearch.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.vroomsearch.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.vroomsearch.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank



You can download the log from from here:

http://tomcoyote.org/hjt/

Follow the listed instructions and go here to have someone read your log and tell you what to remove. It's really pretty easy.

http://forums.tomcoyote.org/


Here's a tutorial for Highjack this:

http://www.bleepingcomputer.com/forums/index.php?showtutorial=42

 

[bases]

thanks for the replies
- downloaded the spysweeper, saw the vroomsearch on there....got rid of the objects after scan...and rebooted, with safe mode

why safe mode,,,

well so far so good...no problems

again thanks

 

[bsucards]

thanks for the replies
- downloaded the spysweeper, saw the vroomsearch on there....got rid of the objects after scan...and rebooted, with safe mode

why safe mode,,,

well so far so good...no problems

again thanks

why safe mode, because it is a tone down versaion of windows where not all the services are running and other applications are running that spwyare.

So if things are working than things are fine