However...
I am infected with something cos Lavasoft still reports:
Possible Browser Hijack attempt RegData Data Miner=20
HKEY_CURRENT_USER:Software\Microsoft\Internet=20
Explorer\Main"Start Page" ("about
:blank") Possible browser=20
hijack attempt=20
Possible Browser Hijack attempt RegData Data Miner=20
HKEY_USERS:.Default\Software\Microsoft\Internet=20
Explorer\Main"Start Page" ("about
:blank") Possible browser=20
hijack attempt=20
and HijackThis this: RO - HKLM\Software\Microsoft\Internet=20
Explorer\Main,Local Page =3D
both in the last few minutes and since my capitulation!
?
Ben.
-----Original Message-----
I always found 'school' painful. I have to say I would=20
have ignored 'me'in this case. Thanks for persisting and
Well done, Noel (and Mike). vbg
-----Original Message-----
That looks a little healthier, Ben! - wasn't *that*=20
painful, was it?
--=20
Noel Paton (MS-MVP 2002-2004, Win9x)
Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm
Please read http://dts-l.org/goodpost.htm on how to post=20
messages to NG's
or
http://www.microsoft.com/presspass/f.../2001/Mar01/Ma
r
27pmvp.asp
"Ben B" wrote in=20
message
.. .
Humph!
I know a couple of conspirators more devious than myself
when I read their writing.
Internet Explorer
Q832894 (details...)
Q837009 (details...)
SP1 (SP1)
Microsoft Corporation - Internet Explorer Version
6.00.2800.1106 *
Courtesy MM.NP and Belarc.
Big sigh,
Ben.
-----Original Message-----
Just get the IE6 update, Ben!!
--=20
Noel Paton (MS-MVP 2002-2004, Win9x)
Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm
Please read http://dts-l.org/goodpost.htm on how to post
messages to NG's
or
http://www.microsoft.com/presspass/f...s/2001/Mar01/M
a
r
27pmvp.asp
"Ben B" wrote in
message
. ..
Hello Mike,
I will respond to what I think you will agree is the=20
most
important issue here. The question of my version of I.E.
I have a post made (regarding my using Windows Updates}
immediately following my format and install in which I
expressed my difficulty concerning the SP2=20
installation.=20
I
copy it he
"Subject: Updates will not install after PF and I.
From: "Ben B"
Sent: 6/25/2004 12:36:04 PM
Hello,
After a partition, format and install I went to the WU
site and with a single exception (I.E.6) accepted all=20
the
available updates.
I have I.E. 5.5.4134.100 and O.E.5.4132.2400. (ex Belarc
and my computer).
Version of I.E. prior to PF and I : 5.51.4807.2300 (ex
Belarc which also shows SP2).
I have the downloaded updates for I.E. Q824145 and Q
832894
and for O.E. Q837009.
None of these will install. The reason given "This=20
update
requires I.E.5.5 Service Pack 2 to be installed". The=20
same
applies to the O.E. update (sustituting O.E. for I.E.).
I cannot find this update.
Help/guidance appreciated."
****************************
I could not resolve that issue. Hence I am still using=20
the
mentioned version. I didn't go to I.E.6 (having tried it
out when it first came out I didn't like it).
I use with regularity (daily and updated) the following:
Lavasoft Adaware.
SpybotS & D.
CWShredder.
HijackThis.
SpywareBlaster.
I will add BHODemon.
Lavasoft regularly returns 2 registry entries=20
of "Possible
Browser Hijack..." here they are (this half an hour=20
after
a previous scan showing them):
Possible Browser Hijack attempt RegData Data Miner
HKEY_CURRENT_USER:Software\Microsoft\Internet
Explorer\Main"Start Page" ("about:blank") Possible=20
browser
hijack attempt
Possible Browser Hijack attempt RegData Data Miner
HKEY_USERS:.Default\Software\Microsoft\Intern et
Explorer\Main"Start Page" ("about:blank") Possible=20
browser
hijack attempt
I cannot tell the real MSN page from a false one.
I do appreciate your post and all it's detail, Mike.
Ben.
-----Original Message-----
Are you sure about this Ben and that your homepage=20
hasn't
been hijacked by
something purporting to be MSN? Incidentally I feel=20
that
as a matter of
urgency you need to upgrade your copy of Internet
Explorer to either IE5.5 SP2
or better to IE6 SP1.
This would be a good time to download yourself a copy=20
of
the free Ad-Aware
6.0 from Lavasoft
(http://www.lavasoftusa.com/software/adaware/) and also
SpyBot
(http://www.safer-networking.org/) and scan your system
for and remove all
unwanted parasites, adware and spyware that might be
hiding on your PC.
I would also suggest you download and run merijn's
CWShredder which targets
the CoolWebSearch parasite. CWShredder can be=20
downloaded
from
(http://www.zerosrealm.com/downloads/CWShredder.zip or
http://www.spywareinfo.com/~merijn/files/cwshredder.zip
)
..
Details of the many
forms of the CoolWebSearch hijacker can be found at
http://www.spywareinfo.com/~merijn/c...nicles.html=20
and
also
http://www.pestpatrol.com/pestinfo/c/cws.asp.
Other useful tools include BHODemon
(http://www.definitivesolutions.com/bhodemon.htm that
checks for
unwanted Browser Help Objects and SpywareBlaster
(http://www.wilderssecurity.net/spywareblaster.html)
which can help prevent
some parasites getting a grip on your PC.
Finally if you still continue to experience problems
download a copy of
HijackThis from
(http://www.spywareinfo.com/~merijn/downloads.html).
Create a
folder called hijackthis on C: and copy the file you
downloaded to that
folder. Close as many applications as you can=20
including
all instances of
Internet Explorer and then run hijackthis.exe and post
back the log, provided
that it isn't too long, to this thread, otherwise to=20
the
HijackThis Forum at
http://www.spywareinfo.com/forums/ and hopefully this
will enable someone to
identify the cause of your problem.
--=81
Mike Maltby MS-MVP
Ben B wrote:
Hello,
I have always used 'About Blank' and I wish to=20
continue
using it. However since a recent repartition, format
and
install of WinMe I find MSN declines to let me have=20
the
priviledge of choice. My setting, 'About Blank' is
arbitrarily changed to MSN. This after a a very few
uses
of I.E. (version 5.50.4134.100)
I am puzzled by the fact that MSN is the 'Default' in
Internet Options. I wish my choice of 'About Blank'=20
to
be
the default!
There must be a way of changing this. In the registry
for
instance, or, what would I.E.6 allow - were I to use
it?
.
.
.
.