Default Start page in IE 6

[Guest]

hi,

I hope some one can contact me back with some help. I do
not know how I did it, but I have now got a web page that
has complete taken over as my start page, even when I go
under tools and internet and change it to some thing
else, each time I reboot the same page is back as my
start page. Any help on how I can get rid of it, and
change the defualt page from that page?

Scott munro
(e-mail address removed)

 

[musnazril mustaq khan]

sound to me like your browser being hijected. try delete
cookies, than reset your default address in Internet
Properties.

other way, you can scan your computer using third party
sryware software.

 

[Guest]

Having the same problem.

The default homepage gets set to

res://mshp.dll/index.html#10213

I found the "mshp.dll" file in the root of my C: directory.

I've deleted it, but it keeps getting recreated.

SpyBot couldn't solve the problem.

BTW, I have an old copy of Netscape on my computer, I
think Netscape 4.

It is not affected by the virus.

 

[Frank Saunders, MS-MVP IE/OE]

hi,

I hope some one can contact me back with some help. I do
not know how I did it, but I have now got a web page that
has complete taken over as my start page, even when I go
under tools and internet and change it to some thing
else, each time I reboot the same page is back as my
start page. Any help on how I can get rid of it, and
change the defualt page from that page?

Scott munro
(e-mail address removed)

First eliminate any scumware.
See
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Note that AdAware and SpyBot S & D will each catch some things the other
won't. Also, each need to be updated before every use, even when just
downloaded.

If trying everything at that site does not fix the problem please post back
in the same thread.

--
Frank Saunders, MS-MVP IE/OE
http://www.fjsmjs.com
Reply to Newsgroup. I won't answer email
Protect Your PC
http://www.microsoft.com/security/protect/

 

[Guest]

Hi guys, I saw this about an hour ago as I have had the exact same issue which started a few days ago. Tried the suggested fixes but no luck. Scott, did you have any success in addressing this issue?
Thanks
Chris Lowry

 

[Frank Saunders, MS-MVP IE/OE]

Hi guys, I saw this about an hour ago as I have had the exact same
issue which started a few days ago. Tried the suggested fixes but no
luck. Scott, did you have any success in addressing this issue?
Thanks.
Chris Lowry

From http://www.fjsmjs.com/IE/homepage.htm

If you have SpyBot S&D installed, go to the "Immunize" section.
Is "Lock IE Start Page Settings" ticked?
If so, uncheck it.

If that is not the problem, get and run these programs (if you test after
each one you can stop when the problem is gone):
Ad-Aware:
http://www.lavasoftusa.com
Once installed make sure to update via online before scanning!
and
Spybot - Search & Destroy -
http://security.kolla.de/
http://security.kolla.de/index.php?lang=en&page=download
http://spybot.eon.net.au/
http://www.tomcoyote.org/SPYBOT/
Once installed make sure to update via online before scanning!
and
BHO Demon: http://www.spywareinfo.com/downloads/bhod/

Until the problem is solved.


If you still have problems, some ISP's provide a customized version of IE.
Some Web pages will also reset your home page and do this. One of the
customizations they might make is to disable the ability to change the home
page, so that you are forced to use their home page. You can re-enable this
by making a small change in the Windows registry.

In Regedit, navigate to this key:

HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control
Panel

In the right-hand pane, right-click the "HomePage" value, then select
Modify. Change it to: 00 00 00 00

Also change either or these to zero 0 instead of 1 if present:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explo
rer] - DWORD "NoSetHomePage"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet
Explorer\Restrictions] - DWORD "NoSetHomePage"=dword:00000001

If you don't have this key, browse to:

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main

and in the right hand pane, double click "Local Page" and set equal to
"C:\WINDOWS\System\blank.htm" (no quotes) which will hopefully set your Home
Page to blank and then allow you to subsequently modify it using Internet
Options.

Exit regedit and reboot.

When you reboot, you should be able to change the home page again.

Some pages will also download a program which keeps changing it back. Go to
Start | Run and type:
msconfig
and press <Enter> or click OK. Go to the Startup tab.
See if you can identify any suspicious programs. If you can, uncheck it, If
you can't, change the home page to what you want and then uncheck one and
then reboot. Try IE. If the Web page changed, change it back and then try
msconfig again, rechecking the last one and unchecking the next. Keep doing
this until you find the culprit.


You might also want to look at this little program. I haven't tried it, but
I've read encouraging reports:

http://www.pjwalczak.com/spguard/

--
Frank Saunders, MS-MVP IE/OE
http://www.fjsmjs.com
Reply to Newsgroup. I won't answer email
Protect Your PC
http://www.microsoft.com/security/protect/

 

[Guest]

Frank, the Ad Aware worked but as you stated I had to download the latest version. Thank you so much for the detailed advice...much appreciated!!

 

[Mike Burgess]

Hi,
mshp.dll = coolwebsearch trojan

How to remove Coolwebsearch and affiliates
http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch

Note: this type hijack indicates an unpatched machine, that is lacking
in "Defense". Please visit Windows Update to avoid these exploits.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 01-01-04]
Please post replies to this Newsgroup, email address is invalid
--

 

[dave w]

Frank,
Thanks for this tip on SPYBOT. That solved my problem.

dw