HOME PAGE

[DAVID]

EVERYTIME I LOGON TO THE INTERNET, MY HOME PAGE ADDRESS
HAS BEEN CHANGED TO res://mshp.dll/index.html#22776 AND I
HAVE TO CHANGE IT BACK TO MY HOME PAGE. THIS HAPPENS
EVERYTIME I LOGON. ANY IDEAS?

 

[Ramesh [MVP]]

David,

This is caused by a CoolWebSearch variant.
http://www.pestpatrol.com/PestInfo/c/coolwebsearch.asp

See: Homepage changes unexpectedly:
http://www.mvps.org/sramesh2k/IEFAQ.htm

[CWShredder removes all the variances of this spyware]
http://www.merijn.org/files/CWShredder.exe

--
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k
-------------------------------------------
About Firewalls - Windows XP ICF:
http://www.mvps.org/sramesh2k/firewall.htm

How to block Pop-ups?:
http://www.mvps.org/sramesh2k/Popups.htm

Using ToolbarCop to remove the unwanted Toolband, Toolbar Icons and BHO:
http://www.mvps.org/sramesh2k/toolbarcop.htm
-------------------------------------------


EVERYTIME I LOGON TO THE INTERNET, MY HOME PAGE ADDRESS
HAS BEEN CHANGED TO res://mshp.dll/index.html#22776 AND I
HAVE TO CHANGE IT BACK TO MY HOME PAGE. THIS HAPPENS
EVERYTIME I LOGON. ANY IDEAS?

 

[Mike Burgess]

David,
mshp.dll = coolwebsearch trojan

How to remove Coolwebsearch and affiliates
http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch

Note: this type hijack indicates an unpatched machine, that is lacking
in "Defense". Please visit Windows Update to avoid these exploits.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 01-08-04]
Please post replies to this Newsgroup, email address is invalid