JSI Tip 5787. Internet Explorer displays adult content, even after you change your settings?

To resolve this issue:

1. Use tip 0016, StartUpCPL, or MSConfig to locate any unknown file that is starting. I had one user report that the registry Run entry contained:
C:WINDOWSregedit.exe /s C:WINDOWSsystem32rad2A832.tmp.

Inspect, and if necessary, disable any unknown objects.

2. Use the following rad2A832.tmp entries, from that same user, as a model to the Value Names you will need to correct:

REGEDIT4[HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMain]"Start Page"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751"[HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerMain]"Start Page"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751"[HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMain]"Search Page"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751"[HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMain]"Search Bar"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751"[HKEY_CURRENT_USERSoftwareMicrosoftInternet Explorer]"SearchURL"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751"[HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerSearch]"CustomizeSearch"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751"[HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerSearch]"SearchAssistant"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751"[HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerMain]"Search Page"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751"[HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerMain]"Search Bar"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751"[HKEY_LOCAL_MACHINESoftwareMicrosoftInternet Explorer]"SearchURL"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751"[HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerSearch]"CustomizeSearch"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751"[HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerSearch]"SearchAssistant"="http://www.underlolitas.com/cgi-bin/potop.cgi?action=in&ACC=751"

Basically, determine the pattern of the URL, in this example it is www.underlolitas.com, and search for it in the entire registry. Replace any occurrences found with appropriate entries.

NOTE: Here are some valid default settings:

"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome""Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch""Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch""Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"