1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

ZiPortal Blues

Discussion in 'Windows XP' started by Dwees, Dec 6, 2003.

Thread Status:
Not open for further replies.
Advertisement
  1. Dwees

    Dwees Thread Starter

    Joined:
    Dec 6, 2003
    Messages:
    2
    I was reading other threads and need some technical advice:

    I'm trying to rid Internet Explorer of Ziportal as my home page...as well as un-authorized additions to "My Favorites" list.

    I've downloaded HijackThis and here are the results...

    Logfile of HijackThis v1.97.7
    Scan saved at 10:59:54 PM, on 12/5/2003
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
    C:\Program Files\Real\RealPlayer\RealPlay.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\WINDOWS\SYSTEM32\GEARSEC.EXE
    C:\WINDOWS\wanmpsvc.exe
    C:\WINDOWS\System32\P2P Networking\P2P Networking.exe
    C:\program files\altnet\points manager\points manager.exe
    C:\Program Files\Microsoft Money\System\mnyexpr.exe
    D:\Program Files\America Online 9.0\aoltray.exe
    D:\Program Files\CompuServe 7.0\cstray.exe
    D:\Program Files\Corel\WordPerfect Office 2000\Register\Remind32.exe
    D:\Program Files\Corel\WordPerfect Office 2000\programs\alarm.exe
    D:\Program Files\Corel\WordPerfect Office 2000\programs\dad9.exe
    C:\PROGRA~1\Altnet\DOWNLO~1\asm.exe
    D:\1. Dad's Files\hijackthis\HijackThis.exe
    D:\Program Files\CompuServe 7.0\wcs2000.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://tooncomics.com/main/sp.php
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://tooncomics.com/main/sp.php
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://tooncomics.com/main/sp.php
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://tooncomics.com/main/hp.php
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.hand-book.com/search/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hand-book.com/hp/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.hand-book.com/search/
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.hand-book.com/search/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = http://www.therealsearch.com/hp.php
    R1 - HKLM\Software\Microsoft\Internet Explorer\Search,(Default) = http://www.hand-book.com/search/
    O1 - Hosts: 66.40.16.131 livesexlist.com
    O1 - Hosts: 66.40.16.131 lanasbigboobs.com
    O1 - Hosts: 66.40.16.131 thumbnailpost.com
    O1 - Hosts: 66.40.16.131 adult-series.com
    O1 - Hosts: 66.40.16.131 www.livesexlist.com
    O1 - Hosts: 66.40.16.131 www.lanasbigboobs.com
    O1 - Hosts: 66.40.16.131 www.thumbnailpost.com
    O1 - Hosts: 66.40.16.131 www.adult-series.com
    O2 - BHO: DNSErr object - {1E1B2879-88FF-11D2-8D96-D7ACAC95951F} - C:\WINDOWS\DNSErr.dll
    O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
    O4 - HKLM\..\Run: [AltnetPointsManager] c:\program files\altnet\points manager\points manager.exe -s
    O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
    O4 - HKCU\..\Run: [AddClass] C:\WINDOWS\AddClass.exe
    O4 - HKCU\..\Run: [quicken] C:\WINDOWS\quicken.exe
    O4 - HKCU\..\Run: [iedll] c:\WINDOWS\iedll.exe
    O4 - HKCU\..\Run: [loader] c:\WINDOWS\loader.exe
    O4 - HKCU\..\Run: [editpad] C:\WINDOWS\editpad.exe
    O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: America Online 9.0 Tray Icon.lnk = D:\Program Files\America Online 9.0\aoltray.exe
    O4 - Global Startup: CompuServe 7.0 Tray Icon.lnk = D:\Program Files\CompuServe 7.0\cstray.exe
    O4 - Global Startup: Corel Registration.lnk = D:\Program Files\Corel\WordPerfect Office 2000\Register\Remind32.exe
    O4 - Global Startup: CorelCENTRAL 9.LNK = D:\Program Files\Corel\WordPerfect Office 2000\programs\ccwin9.exe
    O4 - Global Startup: CorelCENTRAL Alarms.LNK = D:\Program Files\Corel\WordPerfect Office 2000\programs\alarm.exe
    O4 - Global Startup: Desktop Application Director 9.LNK = D:\Program Files\Corel\WordPerfect Office 2000\programs\dad9.exe
    O4 - Global Startup: DriveSelect.lnk = D:\Program Files\321Studios\Xpress\DriveSelect.exe
    O4 - Global Startup: Microsoft Office.lnk = D:\Program Files\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
    O9 - Extra button: Related (HKLM)
    O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
    O9 - Extra button: Real.com (HKLM)
    O13 - DefaultPrefix: http://ehttp.cc/?
    O13 - WWW Prefix: http://ehttp.cc/?
    O13 - WWW. Prefix: http://ehttp.cc/?
    O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -
    O19 - User stylesheet: C:\WINDOWS\my.css
    O19 - User stylesheet: C:\WINDOWS\my.css (HKLM)

    Please tell me what to do next.

    Thanks,
    Dwees
     
  2. gmh

    gmh

    Joined:
    Mar 29, 2003
    Messages:
    577
  3. Dan O

    Dan O

    Joined:
    Feb 13, 1999
    Messages:
    8,974
    Dwees,

    Do you need instructions how to do it or is it that you cannot change it?
     
  4. Dwees

    Dwees Thread Starter

    Joined:
    Dec 6, 2003
    Messages:
    2
    I need instructions on how to do it and which files need to be checked off.

    thanks,
    Dan
     
  5. Dan O

    Dan O

    Joined:
    Feb 13, 1999
    Messages:
    8,974
    To change the Home page:

    Open Internet Explorer and select Tools, Internet Options, and General tab. Under Home Page, change the web address to what you desire. Then click OK

    To delete the Favorite:

    Open Internet Explorer and select Favorites and Orgainze Favorites. A menu with Delete will be provided. Find the entry and click Delete.
     
  6. Miz

    Miz

    Joined:
    Jul 1, 2002
    Messages:
    2,146
    Download, install, immediately update and then run Spybot and/or AdAware. Read the help files to familiarize yourself with how they work. I recommend you use them both since each tends to find things the other misses. Let them clean up any spyware found.

    Then, to be doubly sure, download and run CWShredder and run it (link to the download is near the bottom of the page).

    Finally, if you are specifically having problems getting to search engine sites you may be infected with Qhosts. A removal tool can be download here.
     
  7. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/185130

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice