Browser hijacking/ trojan? Help!

[gunni wadd]

hello all . . .

i'm stumped w/ this one. my IE browser 6.0 has been highjacked. i can't use
xp restore or ghost, nor can i uninstall/re-install IE. neither can i update
virus definitions or spyware definitions in other progs. i still have a
connection and can use other porgs such as outlook express. this is what i
captured at the bottom of the browser which continues to come up as: "The
page cannot be displayed" the following string very briefly appears at the
bottom of the page:

"opening page res:// C:\windows/system32/shdoclc.dll/dnserror.htm"

since i can't get my browser to work, i can't find out what this is. i can
still access news groups using OE. any help is greatly appreciated and
thanks in advance.
gunni

 

[MoiMoi]

hello all . . .

i'm stumped w/ this one. my IE browser 6.0 has been highjacked. i can't use
xp restore or ghost, nor can i uninstall/re-install IE. neither can i update
virus definitions or spyware definitions in other progs. i still have a
connection and can use other porgs such as outlook express. this is what i
captured at the bottom of the browser which continues to come up as: "The
page cannot be displayed" the following string very briefly appears at the
bottom of the page:

"opening page res:// C:\windows/system32/shdoclc.dll/dnserror.htm"

since i can't get my browser to work, i can't find out what this is. i can
still access news groups using OE. any help is greatly appreciated and
thanks in advance.
gunni

2 quickies to try.
See if a nasty has put a proxy server in your IE Connection options
(click LAN button).
Also, make sure your HOSTS file hasn't been dinked with.

MM

 

[Victek]

i'm stumped w/ this one. my IE browser 6.0 has been highjacked. i can't

use
xp restore or ghost, nor can i uninstall/re-install IE. neither can i
update
virus definitions or spyware definitions in other progs. i still have a
connection and can use other porgs such as outlook express. this is what i
captured at the bottom of the browser which continues to come up as: "The
page cannot be displayed" the following string very briefly appears at
the
bottom of the page:

"opening page res:// C:\windows/system32/shdoclc.dll/dnserror.htm"

since i can't get my browser to work, i can't find out what this is. i can
still access news groups using OE. any help is greatly appreciated and
thanks in advance.

Have you tried booting into "SAFE mode with networking"? You may be able to
update your antivirus and antispyware programs and also run scans. If you
have problems with networking enabled try running scans in SAFE mode without
networking support.

 

[gunni wadd]

thanks for the replies. i finally found the buggar last night. safe mode
didn't do any different, but i was able to update defs in one of my spyware
progs and it found something called 'trojan agent winlogon'
i couldn't find this in the virus def list, but i rid it out and don't seem
to have any further problems. browser working again. thanks,