L33t people, enter please.
ok im running spy sweeper on my XP. every time i boot up, spy sweeper gives me a warning about how "searchdot.net" is trying to change my homepage. it does this EVERY time i boot up.
i did a search and have NO idea how to get rid of it. i cant locate the specific page right now. but i recall something about a script file hidden in the fonts folder that is causing all this. :thinking:
has anyone else encountered this problem? thanks for the replies.
i did a search and have NO idea how to get rid of it. i cant locate the specific page right now. but i recall something about a script file hidden in the fonts folder that is causing all this. :thinking:
has anyone else encountered this problem? thanks for the replies.
__________________
.
.
here goes that page i was talking about....too technical for me.
http://forums.t2.net/postlist.html?s...32&showforum=3

http://forums.t2.net/postlist.html?s...32&showforum=3
__________________
.
.
found this is a search
Yep, I was hijacked too. I guess it's harmless but annoying.
How to get to the registry to rectify the damage?
Open up the hijacker file C:\Windows\Fonts\msoffice.hta.
The contents refer to HKCU... and HKLM...
HKCU refers to the registry entry HKEY_CURRENT_USER
HKLM refers to the registry entry HKEY_LOCAL_MACHINE
Click Start | Run, and type in RegEdit, which brings you to the Registry Editor. Click Edit | Find and type in http:\\www.searchdot.net. All references to this URL in the registry will be shown. To change the Value to the URL you want, right click the registry name and Modify, entering the correct URL.
Don't forget to delete the HIJACKER file C:\Windows\Fonts\msoffice.hta !!!!!! Reboot after the smoke clears.
How to get to the registry to rectify the damage?
Open up the hijacker file C:\Windows\Fonts\msoffice.hta.
The contents refer to HKCU... and HKLM...
HKCU refers to the registry entry HKEY_CURRENT_USER
HKLM refers to the registry entry HKEY_LOCAL_MACHINE
Click Start | Run, and type in RegEdit, which brings you to the Registry Editor. Click Edit | Find and type in http:\\www.searchdot.net. All references to this URL in the registry will be shown. To change the Value to the URL you want, right click the registry name and Modify, entering the correct URL.
Don't forget to delete the HIJACKER file C:\Windows\Fonts\msoffice.hta !!!!!! Reboot after the smoke clears.
Originally posted by flipped cracker
found this is a search
found this is a search
i found the file using the search feature...but it wont open?
__________________
.
.
first, go into windows explorer.
go to tools/folder options
go to the view tab
make sure everything related to show all files is selected and hide system files is unselected
after you do that, go to start/search, and search for "msoffice.hta"
delete that file
then go to start/run, and type "regedit"
registry will come up
press the F3 key
type "searchdot.net" without quotations
whenever you find something that says that, right click on it and go to "modify" clear the current URL and change it to whatever you want your homepage to be.
press F3 again to continue searching.
after you're done, reboot the computer.
go to tools/folder options
go to the view tab
make sure everything related to show all files is selected and hide system files is unselected
after you do that, go to start/search, and search for "msoffice.hta"
delete that file
then go to start/run, and type "regedit"
registry will come up
press the F3 key
type "searchdot.net" without quotations
whenever you find something that says that, right click on it and go to "modify" clear the current URL and change it to whatever you want your homepage to be.
press F3 again to continue searching.
after you're done, reboot the computer.
Originally posted by spankaveli
first, go into windows explorer.
go to tools/folder options
go to the view tab
make sure everything related to show all files is selected and hide system files is unselected
after you do that, go to start/search, and search for "msoffice.hta"
delete that file
then go to start/run, and type "regedit"
registry will come up
press the F3 key
type "searchdot.net" without quotations
whenever you find something that says that, right click on it and go to "modify" clear the current URL and change it to whatever you want your homepage to be.
press F3 again to continue searching.
after you're done, reboot the computer.
first, go into windows explorer.
go to tools/folder options
go to the view tab
make sure everything related to show all files is selected and hide system files is unselected
after you do that, go to start/search, and search for "msoffice.hta"
delete that file
then go to start/run, and type "regedit"
registry will come up
press the F3 key
type "searchdot.net" without quotations
whenever you find something that says that, right click on it and go to "modify" clear the current URL and change it to whatever you want your homepage to be.
press F3 again to continue searching.
after you're done, reboot the computer.
__________________
.
.



h: