Notices
The Basement Non-Honda/Acura discussion. Content should be tasteful and "primetime" safe.

L33t people, enter please.

Thread Tools
 
Old Oct 28, 2003 | 08:27 AM
  #1  
b00gers's Avatar
b00gers
Thread Starter
 
Joined: Jun 2001
Posts: 58,579
Likes: 0
From: Lll
Default L33t people, enter please.

ok im running spy sweeper on my XP. every time i boot up, spy sweeper gives me a warning about how "searchdot.net" is trying to change my homepage. it does this EVERY time i boot up.

i did a search and have NO idea how to get rid of it. i cant locate the specific page right now. but i recall something about a script file hidden in the fonts folder that is causing all this. :thinking:

has anyone else encountered this problem? thanks for the replies.
__________________
.
Reply
Old Oct 28, 2003 | 08:29 AM
  #2  
b00gers's Avatar
b00gers
Thread Starter
 
Joined: Jun 2001
Posts: 58,579
Likes: 0
From: Lll
Default

here goes that page i was talking about....too technical for me.

http://forums.t2.net/postlist.html?s...32&showforum=3
__________________
.
Reply
Old Oct 28, 2003 | 08:30 AM
  #3  
flipped cracka's Avatar
flipped cracka
BOOM goes the dynamite!
 
Joined: Mar 2003
Posts: 27,571
Likes: 1
From: in a van down by the rive
Default

found this is a search

Yep, I was hijacked too. I guess it's harmless but annoying.

How to get to the registry to rectify the damage?

Open up the hijacker file C:\Windows\Fonts\msoffice.hta.
The contents refer to HKCU... and HKLM...

HKCU refers to the registry entry HKEY_CURRENT_USER
HKLM refers to the registry entry HKEY_LOCAL_MACHINE

Click Start | Run, and type in RegEdit, which brings you to the Registry Editor. Click Edit | Find and type in http:\\www.searchdot.net. All references to this URL in the registry will be shown. To change the Value to the URL you want, right click the registry name and Modify, entering the correct URL.


Don't forget to delete the HIJACKER file C:\Windows\Fonts\msoffice.hta !!!!!! Reboot after the smoke clears.
Reply
Old Oct 28, 2003 | 08:30 AM
  #4  
flipped cracka's Avatar
flipped cracka
BOOM goes the dynamite!
 
Joined: Mar 2003
Posts: 27,571
Likes: 1
From: in a van down by the rive
Default

ha ha
Reply
Old Oct 28, 2003 | 08:32 AM
  #5  
b00gers's Avatar
b00gers
Thread Starter
 
Joined: Jun 2001
Posts: 58,579
Likes: 0
From: Lll
Default

h:
Attached Images
File Type: jpg
ddd.jpg (19.9 KB, 32 views)
__________________
.
Reply
Old Oct 28, 2003 | 08:33 AM
  #6  
b00gers's Avatar
b00gers
Thread Starter
 
Joined: Jun 2001
Posts: 58,579
Likes: 0
From: Lll
Default

Originally posted by flipped cracker
found this is a search
yea i read that...but i have no idea what it is saying. it says open up that file...how :thinking:

i found the file using the search feature...but it wont open?
__________________
.
Reply
Old Oct 28, 2003 | 08:34 AM
  #7  
flipped cracka's Avatar
flipped cracka
BOOM goes the dynamite!
 
Joined: Mar 2003
Posts: 27,571
Likes: 1
From: in a van down by the rive
Default

get on aim, i'll walk you through it.
Reply
Old Oct 28, 2003 | 08:42 AM
  #8  
spanky's Avatar
spanky
I go duffy on dem bitches
 
Joined: Mar 2001
Posts: 28,248
Likes: 0
From: Gonzales, Louisiana
Default

first, go into windows explorer.

go to tools/folder options
go to the view tab
make sure everything related to show all files is selected and hide system files is unselected

after you do that, go to start/search, and search for "msoffice.hta"

delete that file

then go to start/run, and type "regedit"

registry will come up

press the F3 key

type "searchdot.net" without quotations

whenever you find something that says that, right click on it and go to "modify" clear the current URL and change it to whatever you want your homepage to be.

press F3 again to continue searching.

after you're done, reboot the computer.
Reply
Old Oct 28, 2003 | 08:46 AM
  #9  
b00gers's Avatar
b00gers
Thread Starter
 
Joined: Jun 2001
Posts: 58,579
Likes: 0
From: Lll
Default

Originally posted by spankaveli
first, go into windows explorer.

go to tools/folder options
go to the view tab
make sure everything related to show all files is selected and hide system files is unselected

after you do that, go to start/search, and search for "msoffice.hta"

delete that file

then go to start/run, and type "regedit"

registry will come up

press the F3 key

type "searchdot.net" without quotations

whenever you find something that says that, right click on it and go to "modify" clear the current URL and change it to whatever you want your homepage to be.

press F3 again to continue searching.

after you're done, reboot the computer.
ok, after i went to "modify" i get this. at this point, ive already deleted that file.
Attached Images
File Type: jpg
dd.jpg (21.8 KB, 24 views)
__________________
.
Reply
Old Oct 28, 2003 | 08:57 AM
  #10  
b00gers's Avatar
b00gers
Thread Starter
 
Joined: Jun 2001
Posts: 58,579
Likes: 0
From: Lll
Default

thanks spank and cracka :thumbup:
__________________
.
Reply




All times are GMT -8. The time now is 06:52 AM.