To resolve this issue:
1. Use tip 0016,
StartUpCPL, or
MSConfig to locate any unknown file that is starting.
I had one user report that the registry Run entry contained:
C:\WINDOWS\regedit.exe /s C:\WINDOWS\system32\rad2A832.tmp.
Inspect, and if necessary, disable any unknown objects.
2. Use the following rad2A832.tmp entries, from that same user, as a model to the Value Names you will need to correct:
REGEDIT4 \[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\] "Start Page"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751" \[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\] "Start Page"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751" \[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\] "Search Page"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751" \[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\] "Search Bar"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751" \[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\] "SearchURL"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751" \[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\] "CustomizeSearch"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751" \[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\] "SearchAssistant"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751" \[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\] "Search Page"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751" \[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\] "Search Bar"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751" \[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\] "SearchURL"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751" \[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\] "CustomizeSearch"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751" \[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\] "SearchAssistant"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751"Basically, determine the pattern of the URL, in this example it is www.underlolitas.com, and search for it in the entire registry. Replace any occurrences found with appropriate entries.
NOTE: Here are some valid default settings:
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=\{SUB_PRD\}&clcid=\{SUB_CLSID\}&pver=\{SUB_PVER\}&ar=home"
0 comments
Hide comments
