Google Answers Logo
View Question
 
Q: Home Page Being Change Automatically ( Answered 5 out of 5 stars,   0 Comments )
Question  
Subject: Home Page Being Change Automatically
Category: Computers > Internet
Asked by: hawkeyejim-ga
List Price: $10.00
Posted: 14 Oct 2003 04:18 PDT
Expires: 13 Nov 2003 03:18 PST
Question ID: 266048
My home page is constantly being changed by some cookie or virus.  No
matter what my home page is, it gets changed within a few trys or
hours to a prefix of: 
wabu.com/passthrough/index.html?htthttp:/msn.com/
The last part of this URL (msn.com) being the original home setting.
Even by deleting cookies and temp internet files it keeps coming back.
 With is comes tool bar called riechssgye and a fooyer toobar with
various link sites.

The tool bar keeps changing settings also even if I designate the lock
setting.
It unchecks certain choices, like Google and resets the unwanted ones
Answer  
Subject: Re: Home Page Being Change Automatically
Answered By: serenata-ga on 14 Oct 2003 14:01 PDT
Rated:5 out of 5 stars
 
Hi Hawkeyejim ~

Unfortunately, your browser has been hijacked by a "Browser Helper
Object" (BHO) which is no "helper" in your case. This was probably set
by a malicious website you visited.

I say "probably", because if your operating system is WindowsXP, it
can also be installed on your computer using Windows Messenger, if you
haven't disabled it. If you ARE running Windows XP, instructions on
how to disable that are below.


================================
Getting Rid of Wabu Passthrough
================================

1. Edit the Registry -
=======================

     If you are comfortable editing your Registry, the best way to get
rid of the wabu passthrough is to backup your registry (you can back
it up to your desktop) and then

     Click on Start
     Click on Run
     type regedit and <enter>

then click on edit
     click on find and type in wabu
     and delete every entry with wabu in it until find can find no
more entries.

WARNING: If you use Registry Editor incorrectly, you may cause serious
problems that may require you to reinstall your operating system. You
may not be able to solve problems from using the Registry Editor
incorrectly. Use Registry Editor at your own risk.


2. Download and run HijackThis -
==================================

     If you decide you'd rather not edit the Registry, HiJackThis can
find the entries, including registry changes placed there by Wabu
Passthrough.

You can download HiJackThis from Tom Coyote's site here:
   - ttp://www.spywareinfo.com/downloads.php

With information about HiJackThis here:
   - http://www.tomcoyote.org/hjt/#quick


and instructions on fixing and deleting the entries can be found on
Spyware Info's website here:
   - http://www.spywareinfo.com/articles/hijacked/


If you run HijackThis, you may be surprised with the number of
spyware, adware, BHOs, etc., that it detects. It detects those helpers
you may have installed and WANT TO KEEP - such as the Google Toolbar -
as well as those which you don't want at all. You will want to be sure
to get rid of anything to do with mabu.

You may want to delete those you know to be 'helpers' you haven't
placed there.


3. Spybot Search & Destroy -
============================= 

    Wabu may be recent enough that it hasn't been added to the BHOs in
Spybot Search & Destroy, but this is still one of the best tools in
your arsenal to get rid of BHOs, adware, malware, scumware and other
nasties that can be inadvertently picked up while you are surfing the
internet.

You can download this from here:
   - http://www.safer-networking.org/



=============================
More Information On
Getting Rid of Wabu
=============================

Yesterday someone else had the same problem. His problem was fixed by
removing everything from the registry.

Here's a link to his appeal for help and the instructions for getting
rid of it on Computing Net's Tech Support:
   - http://www.computing.net/windows2000/wwwboard/forum/52621.html


I found another instance in Expert's Exchange where they felt it was
picked up from a popup through a Windows Messenger popup. Instructions
of getting rid of it and disabling the Windows Messenger can be found
here:
   - http://www.experts-exchange.com/Miscellaneous/Q_20696064.html



=========================
Preventive Maintenance
=========================

Finally, for preventive maintenance, make sure programs cannot just
download on your computer without your permission.

From the Internet Toolbar, go to Tools > Internet Options > Advanced. 
Make sure "Enable Install On Demand (Internet Explorer)" and "Enable
Install On Demand (Other browsers)" are unchecked.


Google Search terms:

  * wabu passthrough
    - ://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=wabu+passthrough

  * wabu pass through
    - ://www.google.com/search?hl=en&lr=&ie=UTF-8&oe=UTF-8&q=wabu+pass+through&btnG=Google+Search



This should help rid you of the wabu hijacking you are experiencing.


Best regards and good luck,

Serenata
hawkeyejim-ga rated this answer:5 out of 5 stars
Thanks for easy to understand answer.  I have been out of town all
weekend but will proceed to follow your advise as soon as I get caught
up with everthing else.

Comments  
There are no comments at this time.

Important Disclaimer: Answers and comments provided on Google Answers are general information, and are not intended to substitute for informed professional medical, psychiatric, psychological, tax, legal, investment, accounting, or other professional advice. Google does not endorse, and expressly disclaims liability for any product, manufacturer, distributor, service or service provider mentioned or any opinion expressed in answers or comments. Please read carefully the Google Answers Terms of Service.

If you feel that you have found inappropriate content, please let us know by emailing us at answers-support@google.com with the question ID listed above. Thank you.
Search Google Answers for
Google Answers  


Google Home - Answers FAQ - Terms of Service - Privacy Policy