Home Page Problem

[Fabrice]

My Home Page default in Internet Explorer (www.msn.com)
has been changed to a yellow page directory. I went to
the Internet and changed it but this keep coming back. I
have used the Microsoft Article 320519 and 310353 but the
same problem still exist.

It now always come back to
res://mshp.dll/index.html#10213 and it start interefering
with explorer, ie sending me back to
res://mshp.dll/index.html#10213 when I try to surf. I
deleted the file mshp.dll but it does reappear.

Anyone has an idea? Help Appreciated. Thanks

 

[Michael Solomon \(MS-MVP Windows Shell/User\)]

First run a virus scan.

Second, download, install and run the following:
Ad Aware: www.lavasoftusa.com

Check the following site, click the "H" at the top of the page and scroll to
"Home Page Hijacking." Note, you may have to maximize the window in order
to see the alphabet at the top of the page:
http://www.kellys-korner-xp.com/xp_abc.htm

 

[Will Denny]

Hi

Your browser may have been 'hijacked'. Try either/both of the following programs to search for any spyware that may be on your system:

Ad-Aware - www.lavasoftusa.com
Spybot - http://www.safer-networking.org/

 

[Fabrice]

Hi Will, Hi Michael.

You were both right my browser had been hijacked. Your
solutions did not work as I had a nasty version of CWS.
Everytime I used AdAware or Spybot they were cleaning the
spyware and the registry entries it came back.

I tried HijackThis, and thanks to the list of BHOS posted
at http://www.spywareinfo.com/bhos/ I managed to find the
culprit. I cleaned them but this nasty version had
installed a boot .exe file so it reinstalled itself after
I rebooted my PC. I finally managed to find the .exe file
that created the problem but could not delete or
desinstall it.

The solution was a little program that clean the whole
lot. It is available at
http://www.merijn.org/cwschronicles.html

Again, Will and Michael, many thanks for putting me on
the right track.

Fabrice

-----Original Message-----
Hi

Your browser may have been 'hijacked'. Try either/both

of the following programs to search for any spyware that
may be on your system:

 

[Michael Solomon \(MS-MVP Windows Shell/User\)]

You're welcome.

That was one nasty hijacker. Great work on resolving it and thanks for the
information.

 

[Will Denny]

I'm glad you have solved your problem - great detecting. CWS seems to turning up more often lately installing various files that are hard to get rid of.

 

[vAd0r]

I finally found the fix for this stupid problem.
CWShredder will take care of this annoying hijacker problem. The
problem comes from a MSS VM Java exploit. The update comes from
windowsupdate to keep it from happening again. Also try Hijack This
out. These can be found at
http://http://merijn.org/