General discussion

  • Creator
  • #2277615

    Home page chaging


    by babup ·

    I am using XP pro sp2 in Hp laptop. after sp2 installtion i used my laptop , it worked well. Last 2 days i am facing problem like my home page is resetting to “http:///”. If i changed , with in secounds its chaging back to “http:///”. i have been using spybot-S&D. Still this issue happend. Any one knows the solution for this?

All Comments

  • Author
    • #2708780

      Reply To: Home page chaging

      by dmiddltn ·

      In reply to Home page chaging

    • #2708620

      Reply To: Home page chaging

      by dmiles ·

      In reply to Home page chaging

      Please follow these instructions carefully!

      Download and install APM from:

      Close all windows except HijackThis and fix these lines.

      R1 – HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\DOCUME~1\JOHNST~1\LOCALS~1\Temp\sp.html
      R1 – HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = file://C:\DOCUME~1\JOHNST~1\LOCALS~1\Temp\sp.html
      R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\DOCUME~1\JOHNST~1\LOCALS~1\Temp\sp.html
      R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = file://C:\DOCUME~1\JOHNST~1\LOCALS~1\Temp\sp.html
      R1 – HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOCUME~1\JOHNST~1\LOCALS~1\Temp\sp.html
      R0 – HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOCUME~1\JOHNST~1\LOCALS~1\Temp\sp.html
      R1 – HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
      R1 – HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
      O2 – BHO: (no name) – {13C861B2-0082-4B8B-94CC-F0F41BB317AF} – C:\WINDOWS\System32\oebjnab.dll

      Then start APM.
      In the upper window select explorer.exe
      In the lower window find and rightclick the BHO from the HijackThis log
      Select Unload DLL and click OK on the prompts that follow.

      Reboot and scan with AdAware (check for updates first!) to remove the txt and html protocol association.

Viewing 1 reply thread