Help me undo my homepage, it is hijacked to protectionwarning.com?

Question

My homepage is constantly redirected to protectionwarning.com even though I have it set to myspace.com (in Options). Please advise how I can get rid of this protectionwarning.com page.

Answer 1

Since your homepage is pointing to http://protectionwarning.com/ , this means your PC is infected with a trojan called Zlob Trojan. Of course it is important to get rid of protectionwarning.com, but it is just as important to also remove the Zlob Trojan that implanted it there. In my experience, a program called SpyNoMore is your best bet in removing the Zlob trojan. By removing this trojan, you will also get rid of protectionwarning.com. Another symptom of Zlob Trojan is that it generates fake warning messages like:

System Alert
Critical System Error
System Performance monitor warning
Security Alert: NetWorm-i.Virus@fp
W32.Myzor.FK@yf

http://www.spynomore.com/protectionwarning-com.htm

http://www.spynomore.com/trojan-zlob.htm

Answer 2

Homepage being hijacked is a very complicated issue. Usually happens after you (accidently) install some softwares over the internet which can be viewed in (Task Manager). You need to uninstall any newly installed software and end their tasks at Task Manager and turn off Windows System Restore. Also need to run a software called HijackThis.exe which can be downloaded at http://www.download.com/HijackThis/3000-8022_4-10379544.html.
These have to be done carefully because you can't just delete anything that shows on your HijackThis report. Run HijackThis and post your report here. Make sure your antivirus is up to date. Good luck.

Answer 3

Your PC is infected with abrowser hijacker, use these scans to remove it.

All of these are ones that I personally use and all are free.After you install any of them,make sure you update them to get the full affect.

AVG Removes I-Worm/Stration · BackDoor.Generic3.GBB and .GBC · Worm/Generic.FX · Exploit.WMF
http://free.grisoft.com/doc/5390/lng/us/...



Spybot - Search & Destroy detects and removes spyware, a relatively new kind of threat not yet covered by common anti-virus applications. Spyware silently tracks your surfing behaviour to create a marketing profile for you that is transmitted without your knowledge to the compilers and sold to advertising companies. If you see new toolbars in your Internet Explorer that you haven't intentionally installed, if your browser crashes inexplicably, or if your home page has been "hijacked" (or changed without your knowledge), your computer is most probably infected with spyware. Even if you don't see the symptoms, your computer may be infected, because more and more spyware is emerging. Spybot-S&D is free, so there's no harm giving it a try to see if something has invaded your computer.
http://www.spybot.info/

http://superantispyware.com/
SUPERAntiSpyware is the most thorough scanner on the market. Our Multi-Dimensional Scanning and Process Interrogation Technology will detect spyware that other products miss! SUPERAntiSpyware will remove ALL the Spyware, NOT just the easy ones!
Easily remove over 100,000 pests such as SmitFraud, Vundo, WinFixer, SpyAxe, SpyFalcon, WinAntiVirus, AntiVermins and thousands more!

Answer 4

To change the Home page in registry.

1. Click Start, and then click Run.
2. In the Open box, type regedit, and then click OK.
3. In Registry Editor, locate the following subkey, if it exists:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel

4. If the ResetWebSettings value or the HomePage value exists in this key, right-click the values, and then click Delete.

Note You may also want to verify any Web site information contained in the Default_Page_URL value and the Start Page value in the following registry keys:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main

HKEY_ LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main

HKEY_USERS\Default\Software\Microsoft\Internet Explorer\Main

5. On the Edit menu, click Delete, and then click Yes to confirm the deletion.
6. On the File menu or on the Registry menu, click Exit to quit Registry Editor.

Answer 5

Correct your home page to the one you prefer, then immediately do the following:

Backup the registry and/or export the following keys:
go to Start>Run, type regedit. Navigate to:
HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\Internet ExplorerRight-click on the Internet Explorer key, choose new>Key, name it Control Panel. Right-click on the Control Panel, chose new>DWORD value, name it Homepage. Right-click on Homepage, choose modify and type in the number 1.

Answer 6

I actually went to the page and I was notified that there was a virus trying to infect my computer. You need to run your antivirus program if you have one. If you don't, then you can download a great free one at http://free.grisoft.com/softw/70free/setup/avg75free_432a904.exe