Whenever I open Explorer, that goes into my address bar automatically, and some website opens warning me that the FBI is tracking me...and offering some software at the bottom. I tried to change the homepage in Internet Settings, but it won't let me. I tried SpyBot and SpyHunter, and neither of them solved it. I need to get this fixed...please help!!!

You need to search your registry for the keys which are causing this-find the strings and delete them but make a system restore point and backup the registry keys which you delete first in case you accidentally delete the wrong ones.

How do I know what string(s) it is...there are a ton of different ones, and if i'm looking for just a handful, how do i know which ones to look for...is there someway to search? what do i do?

You can get the program AdAware (by Lavasoft). Try it and see if it solves your problem. I had a similar problem and hated my computer until AdAware came to the rescue. Here's the link: http://www.lavasoftusa.com/support/download/

Its a great little program. Hope that helps.

Search for the website address in the registry-should point at the guilty keys. Like is said, back up anthing you delete first and you can always reinstate it. Also do a wildcard search for the filename (secure.html), and you'll probably need to delete the file itself. While you're there, start>run>msconfig, click on the startup tab, and check out the programs which are set to run at startup. Some of the names are a bit obcscure, so refer to this list for what they do:

http://www.sysinfo.org/startuplist.php

anyone figure out exactly what needs to be deleted ? I'm having the same problem.

start>run>msconfig, click on the startup tab, disable 'reg32.exe' press apply and then restart your computer. When you restart, change your homepage to what it should be and it should work.

I've just removed the same virus. When trying to open Internet Explorer it gives an error message "... C:\Windows\secure.html..." You have to remove C:\Windows\reg32.exe first. You can also open reg32.exe with notepad to be sure. You will see some text including secure.html. After removing the file you have to enter the registry and search for "secure.html" and "defaultsearch" Remove these entries, open your browser and set your home page to blank or else. Don't forget to remove the startup line "C:\Windows\reg32.exe from your boot list. Start Menu -> Run -> msconfig32.exe -> Startup. If you have any other questions mail me at beshko@mail.bg Sorry for bad language and good luck!

Has anyone found a solution? the registry entries are being restored. Secure.html, secure1.html and reg32.exe are restored after deletion. The fix appears to work ok but after rebooting once or twice its back.
I did not set the home page to blank but to yahoo, if this was the critical step i missed let me know. If not the next step is a reinstall

Please try again:

1. Press CTRL+ALT+DEL and kill the reg32.exe process
2. Start Menu -> Run -> msconfig32.exe -> Startup -> Remove the reg32.exe
3. Delete or Remove reg32.exe from C:\Windows directory
4. Run regedit and remove the lines containing "secure.html" and "defaultsearch" text. Also try to find a line containing "reg32.exe"
5. Open your browser and set you homepage to whatever you want.
6. Reboot the system

I'm using Windows XP and have no problems removing the virus. What's your OS? I'll try to help you. If you have an ICQ account contact me at ICQ# 20505059

thannx for the reply unfortunatly quite busy with the new virus threats will try your fix asap

Hi Tzvetkov,

Thank you for your propagation of your simple, effective & professional solution at
the problem named in the subject.

Thank you, it works fine !

An additional q.:

The SpyHunter 1.1.29. found 15 infected registry in my PC, but not kill them.
Have you got a free program, which is not only find them, but kill or quaranteed these
built in SpyWares ? Thnks !

Hey I'm glad to hear that the fix works! I think I can help you finding the programs you asked about. Contact me at ICQ# 20505059 or email: beshko@mail.bg Have FUN!

i changed my homepage
but sometimes i didn't do anything it still come out some web page

NEED HELP. WENT THROUGH THE STEPS TO GET THE FBI WATCHING YOU AND SALE OF SOFTWARE OFF MY COMPUTER. DID THAT. NOW MY DEFAULT PAGE COMES UP BLANK.

EVERYTIME I SELECT A NEW HOMEPAGE, GO THERE, CLOSE OUT AND GO BACK IT COMES UP WITH THIS HOMEPAGE AND A BLANK SCREEN APPEARS.

ANY ASSISTANCE WOULD BE APPRECIATED.

THANKS

B. LEE MILLER

Take a look at these fixes.

http://www.hardwareanalysis.com/content/topic/20100/

cw shreader did the trick.

Guy`s if you have about 30min. do a windows clean install. First before this try one more thing. Go to the tool bar click internet options,delete files and cookies. then blue out box above and type in http://www.msn.com and click on current and then click on OK. good luck

First of all I would like to thank everone for there help on the C:\WINDOWS\secure.html. I had installed ad-awear and cwshredder. but for some reason the C:\WINDOWS\secure.html still popped up about every twenty to thirty min. or so. I was fed up and must have done somthing right because I was able to delete reg32 finally. Still I am having a couple of problems still. I used to have a tool bar where I had a pop up blocker from yahoo it is no longer there. the tool bar doesn't even apper anymore. the other problem I have is that when ever I do the start>run>msconfig the window pop's up for about two second's then disappears. I don't know why and would like to fix it. I also am scared that some of my files may have been taken from me and would like to know if there is a way to find out or fix them. I would like to thank everyone of you who have helped me out not just me but anyone eles out there like me. thank you very much .

"the other problem I have is that when ever I do the start>run>msconfig the window pop's up for about two second's then disappears."

It's possibly a virus that kills processes like msconfig, regedit, norton antivirust, f-prot etc. Try running start menu -> run -> regedit and tell me if it closes. If so download the F-prot antivirus for Windows home users from http://www.f-prot.com/download/home_user/ Start you PC in Safe Mode and install the program. SCan your local hard drives and you may find the virus. If so reboot again in Normal mode and run Norton Antivirus... That should help. Sorry for bad language again

Read this carefully! -> http://securityresponse.symantec.com/avcenter/venc/data/w32.hl...ot.ao.html May be that's your virus. On my computer the infected file was lsas.exe. You must kill this process to prevent stopping of your programs.

MANY THANKS TO ROY G. I ERASED THE REG32 FOR THE UMPTEENTH TIME, FOLLOWED YOUR INSTRUCTIONS AND FOR THE FIRST TIME WAS ABLE TO PUT ANOTHER HOME PAGE ON THE INTERNET OPTIONS SECTION AND WHEN I LEFT IT DID NOT TO DEFAULT TO THE SUBJECT LINE ABOVE. DON'T KNOW WHETHER THIS WILL STAY FIXED BUT FOR NOW IT IS WORKING PROPERLY.

AGAIN MANY THANKS ROY G.

B. LEE MILLER