Task Manger won't run, Home Page Hi-jacked by Microsoft?!!!

I started my Dell pc up this morning and wanted to go into the task manger through the task bar but won't let me. I usually go into it to close of certain programs to free up some memory. Them i noticed when i open Internet Explorer it goes to Microsoft's home page instead of my Google home page! I went into internet options and it told me that some setting are managed by your system addmistrator. Im not running my pc over a network, i use it for my own personal use, i've ran a virus/malware/spyware check using Spybot, avast pro, norton and adware 2007 but can't find anything. I there any way i can fix these two problems without using System Restore? Thanks.

Ok, done a FULL scan with Spybot, it pinpointed where the task manager was disabled, have that fixed now. I still can't change my homepage, i think i appears that i was on a webpage last night called www.serial99.com or something like that, it must of installed malicious spy-ware to change the browser.

[Moderator]

Run all your malware scans in safemode.
Post a list of what you ran and what it found and fixed.
DLoad and run HijackThis...DO NOT let it fix anything until advised...

I'll move this to the Virus and Spyware section

This is the HijackThis logfile..........



[Saving disk space - attachment deleted by admin]

I'll take a look...

Print this post out, since you won't have an access to it at some point.

Download, and install Spybot (if you don't have it) from here: http://www.safer-networking.org/en/download/index.html

Close all windows, except for HJT.

Put a checkmark next to following HJT entries:

- O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)

- O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)

- O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

- O4 - HKLM\..\Run: [NTuserFramework] %windir%\system32\drivers\svchost.exe
(don't confuse it with legit "svchost.exe" file, which is always located in %\Windows\System32 directory)

- O8 - Extra context menu item: &Webshots Photo Search - res://C:\Program Files\Webshots\WSToolbar4IE.dll/MENUSEARCH.HTM

- O13 - WWW Prefix:

Click on "Fix It" button.

Restart your computer in Safe Mode (F8)

Run Spybot (click on updates, first), and fix whatever it asks you to fix.

Delete following files (if they still exist):

- svchost.exe from: C:\Windows\system32\drivers\ directory

- WSToolbar4IE.dll from: C:\Program Files\Webshots\ directory

Turn off System Restore.

Restart in Normal Mode.

Turn System Restore on.

Run HJT again, and post back its log back here.

Broni, i will have to get back to you Saturday on the new log file because Ive to do some work on a friends PC at the moment.

Not a problem

Hi Broni, i done what you said, i've attached the new logfile.

[Saving disk space - attachment deleted by admin]

Let me take a look....

Congratulations!
You just received "Clean Computer" certificate!

But i still can't change my home page

What IE version are you using, because for some strange reason, it doesn't say in your HJT log (I'll have to check on this, because I've never seen this before)?

Hi Broni, i'm using Internet Explorer 7, i've even noticed when my pc starts up its says 'keyboard faliure' but when it does start up the keyboard works fine i have the latest updates from Windows Update too.

In IE, click Tools>Internet Options>Advanced tab, and click on "Reset" button (NOT on "Restore...)
Will it allow you?

No it still won' allow me

[Moderator]

Try changing it to none...re-boot a few times then try to change it towhich one you want.
Are you running a firewall ? ?Can you get to the page you want as your start page with no trouble or is the page being blocked ? ?

It doesn't let me change it at all, when i go into Tools-Internet Options 'use currnet, use default and use blank' are all disabled, its says at the bottem 'Some setting are managed by system addministrator'. Yeah i can get to any page i want when i load up IE no problem, its just a bit annoying that i can't set the home page which is usualy google.

I think, your problem is, that I believe, you are not logged in as Administrator. I'm not sure yet how to fix it, but I think this is the issue we have to work on.

[Moderator]

Boot into safemode and do it from there and re-boot....

p.s. Follow the same instructions...
p.s.s. Whose machine is this ? ?

I own the PC myself. I pressed F8 to go into the options for Safe Mode but when i want to select it the keyboard freezes, it won't let me go up or down to even go into safe mode  . My keyboard only has a USB connection. I tried my old "Dodgy"  keyboard where if i use it the mouse freezes! . So i used the old keyboard, when into F8, went into safe mode, PC starts up but then the mouse has frozen so i can't click my login name

[Moderator]

Use the Tab button to navigate thru the login screen...
I'd get a new PS2 keyboard as well...thet're not that expensive and as you see pretty handy to have.