Task Manger won't run, Home Page Hi-jacked by Microsoft?!!!

I started my Dell pc up this morning and wanted to go into the task manger through the task bar but won't let me. I usually go into it to close of certain programs to free up some memory. Them i noticed when i open Internet Explorer it goes to Microsoft's home page instead of my Google home page! I went into internet options and it told me that some setting are managed by your system addmistrator. Im not running my pc over a network, i use it for my own personal use, i've ran a virus/malware/spyware check using Spybot, avast pro, norton and adware 2007 but can't find anything. I there any way i can fix these two problems without using System Restore? Thanks.

Ok, done a FULL scan with Spybot, it pinpointed where the task manager was disabled, have that fixed now. I still can't change my homepage, i think i appears that i was on a webpage last night called www.serial99.com or something like that, it must of installed malicious spy-ware to change the browser.

[Moderator]

Run all your malware scans in safemode.
Post a list of what you ran and what it found and fixed.
DLoad and run HijackThis...DO NOT let it fix anything until advised...

I'll move this to the Virus and Spyware section

This is the HijackThis logfile..........



[Saving disk space - attachment deleted by admin]

I'll take a look...

Print this post out, since you won't have an access to it at some point.

Download, and install Spybot (if you don't have it) from here: http://www.safer-networking.org/en/download/index.html

Close all windows, except for HJT.

Put a checkmark next to following HJT entries:

- O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)

- O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)

- O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

- O4 - HKLM\..\Run: [NTuserFramework] %windir%\system32\drivers\svchost.exe
(don't confuse it with legit "svchost.exe" file, which is always located in %\Windows\System32 directory)

- O8 - Extra context menu item: &Webshots Photo Search - res://C:\Program Files\Webshots\WSToolbar4IE.dll/MENUSEARCH.HTM

- O13 - WWW Prefix:

Click on "Fix It" button.

Restart your computer in Safe Mode (F8)

Run Spybot (click on updates, first), and fix whatever it asks you to fix.

Delete following files (if they still exist):

- svchost.exe from: C:\Windows\system32\drivers\ directory

- WSToolbar4IE.dll from: C:\Program Files\Webshots\ directory

Turn off System Restore.

Restart in Normal Mode.

Turn System Restore on.

Run HJT again, and post back its log back here.

Broni, i will have to get back to you Saturday on the new log file because Ive to do some work on a friends PC at the moment.

Not a problem

Hi Broni, i done what you said, i've attached the new logfile.

[Saving disk space - attachment deleted by admin]

Let me take a look....

Congratulations!
You just received "Clean Computer" certificate!

But i still can't change my home page

What IE version are you using, because for some strange reason, it doesn't say in your HJT log (I'll have to check on this, because I've never seen this before)?

Hi Broni, i'm using Internet Explorer 7, i've even noticed when my pc starts up its says 'keyboard faliure' but when it does start up the keyboard works fine i have the latest updates from Windows Update too.

In IE, click Tools>Internet Options>Advanced tab, and click on "Reset" button (NOT on "Restore...)
Will it allow you?