Home Page Settings - HELP

[ml]

my home page settings now resort to this
res://cludn.dll/index.html#27063
I try to reset web options and reset home page but it
won't let me. then I tried to go over 320159 and
310353in the msn knowledge base article but that didn't
seem to help. any suggestions?

 

[Kaylene aka Taurarian]

Spyware Programs links:-
www.lavasoftusa.com Ad-Aware
www.security.kolla.de Spybot

SpywareBlaster
http://www.javacoolsoftware.com/spywareblaster.html

CWShredder
http://www.spywareinfo.com/~merijn/downloads.html

Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Downloadable McAfee AVERT Stinger:
Stinger: http://vil.nai.com/vil/stinger/
stand-alone utility used to detect and remove specific viruses. It is not a
substitute for full anti-virus protection, but rather a tool to assist
administrators and users when dealing with an infected system. Stinger utilizes
next generation scan engine technology, including process scanning, digitally
signed DAT files, and scan performance optimizations.

Perhaps an online security/virus check
Symantec
http://security.norton.com/sscv6/default.asp?langid=ie&venid=sym
Trend Micro House Call:
http://housecall.trendmicro.com/
Panda ActiveScan;
http://www.pandasoftware.com/activescan/com/activescan_principal.htm
McAfee FreeScan:
http://us.mcafee.com/root/mfs/default.asp
Kaspersky Labs On-line Virus Checker:
http://www.kaspersky.com/remoteviruschk.html
BitDefender Online Scan:
http://www.bitdefender.com/scan/licence.php

Free virus program - AVG Anti Virus
http://www.grisoft.com/us/us_dwnl7.php

 

[ml]

Wow. thanks for the advice. I downloaded all this stuff
but my home page is still acting up.

Goes to res://cludn.dll/index.html#27063

Any other suggestions as to how I can get rid of this?

 

[Kaylene aka Taurarian]

Did you run Ad-Aware and/or Spybot (update their definitions) to see if there
was any spyware?
Did the online virus scans pick up anything?

Only other suggestion

For a Tutorial of Hijackthis:
http://www.spywareinfo.com/~merijn/htlogtutorial.html

You can download Hijackthis from:
http://www.spywareinfo.com/~merijn/downloads.html

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates: "hijackthis.log")
Go to: http://forums.spywareinfo.com/
Sign in, go to the "Malware Removal" section.
Press "New Topic", copy and paste hijackthis.log into your new message.

 

[Jim Byrd]

Hi ML - See these threads first:
<http://forums.spywareinfo.com/index.php?showtopic=7447>
<http://forums.spywareinfo.com/index.php?showtopic=7261>
<http://forums.spywareinfo.com/index.php?showtopic=7281>



Then from merijn, here: <http://www.spywareinfo.com/~merijn/index.html>


June 18, 2004:
Please stop emailing me about the new CWS variant that hijacks you to
res://<random>.dll/sp.html#96676. I am aware of this new thing, but it's a
beast to remove.
A solution is being worked on, see this thread on the SWI forums
<http://forums.spywareinfo.com/index.php?showtopic=7447>.

If it's not working for you, or it's too complicated, I heard from several
people that this workaround works as well:
Open the DLL you get hijacked to in Notepad
Select all content (Ctrl-A) and delete it
Save the file and exit Notepad
Find the file in Explorer, right-click it, select Properties, put a
checkmark in 'Read-Only' and click OK.
If you can't find the DLL file, make sure your settings allow you to view
"Hidden files". Open up any explorer windows and click on "Tools", "Folder
Options", "View" and be sure to check off "Show Hidden Files and Folders".



--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In