Annoying homepage setting, from about.com?

[David]

Anyone know how I can remove this annoying home padge
setting that sets itself as my home page each second time
I open my browser: res://mshp.dll/index.html#22776

Thank-you!

 

[PA Bear]

Coolwebsearch hijacker variant!

CoolWebSearch Chronicles & CWShredder
http://www.merijn.org/cwschronicles.html
http://www.merijn.org/files/cwshredder.zip (download)

Check your system for other "hijackware":

Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

You *must* seek updates for Ad-Aware, Spybot, etc., before each and every
use, even "right out of the box". But even then, they can't catch
everything. When all else fails, HijackThis
(http://www.merijn.org/files/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. **Post
your files to http://forums.spywareinfo.com/ or the Spyware forum at
http://forum.aumha.org/ for expert analysis, not here.**

Also update your virus definitions and then run a full system scan. From
now on, do both daily.
--
IE6-specific newsgroup:
news://msnews.microsoft.com/microsoft.public.windows.inetexplorer.ie6.browser

HTH...Please post back to this thread

~Robear Dyer (aka PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

Protect Your PC
http://www.microsoft.com/security/protect/

 

[Guest]

That is a form of spyware ....... try using adware6.0 or
spybot search and destroy that may solve the problem

 

[Kelly]

Hi David,

Homepage resets to: res://mshp.dll/index.html#22776

It makes changes here: Start/Run/Regedit

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main

Default_Search_URL
Start Page

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main

Default_Page_URL
Default_Search_URL
Search Bar
Search Page
Start Page

It also adds: C:\Windows\mshp.dll

Manual Procedure: Remove the above mentioned entries including going to
Start/Run/Msconfig/Win.ini/Windows/Run and Unchecking fntldr.exe

Then follow up by running HijackThis:
http://www.spychecker.com/program/hijackthis.html