m/'>here. error, what is it?

[David]

Hi,
Everytime I open a new browser session after the computer
has been off, i get the m/'>here. text on a blank page.
This happens at home, my work computer, and even my wifes
work computer. Any idea what this is and how to correct it?
Dave

 

[Frank Saunders, MS-MVP]

Hi,
Everytime I open a new browser session after the computer
has been off, i get the m/'>here. text on a blank page.
This happens at home, my work computer, and even my wifes
work computer. Any idea what this is and how to correct it?
Dave

First eliminate any scumware.
See
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Note that AdAware and SpyBot S & D will each catch some things the other
won't. Also, each needs to be updated before every use, even when just
downloaded. There's also a lot more to do than just those two programs.
CWShredder is also available here:
http://www.kellys-korner-xp.com/regs_edits/cwshredder.zip
**Post your HijackThis log to
http://forums.spywareinfo.com/ or the Spyware forum at
http://forum.aumha.org/ for expert analysis, not here.**
Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder
may be found on this page:
http://aumha.org/a/parasite.htm.
If trying everything at that site does not fix the problem please post back
in the same thread.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

 

[Guest]

Is your homepage by any chance MSN? I've been having the same problem for a few weeks. It started about a week after I got the computer, and I had only accessed a handful of web sites (all of which I accessed frequently onthe old computer), so I doubted that spyware was the culprit. But I decided to try Ad-aware and Spybot S&D last night, and that did not solve the problem

A few other people have reported the same problem (all with MSN as their homepage), but I have not yet seen a solution that works.

Kyle

 

[Guest]

I think I have eliminated the problem. I ran Hijack This and looked for suspicious items in the log file. There were 5 browser helper objects (BHO) listed. One had no name and no file associated with it. After backing up that branch of the registry, I deleted the suspect key, and now my MSN homepage loads every time. The registry key I deleted is

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDD3B846-8D59-4ffb-8758-209B6AD74ACC}

 

[H Leboeuf]

It may have been from a failed installation. that key is for MSmoney.
{FDD3B846-8D59-4ffb-8758-209B6AD74ACC} O BHO mnyviewer.dll


Source: spywareinfo.com
A good resource to find the { CLSID I.D. } associated with these programs.
http://www.sysinfo.org/bhoinfo.php

I think I have eliminated the problem. I ran Hijack This and looked for

suspicious items in the log file. There were 5 browser helper objects (BHO)
listed. One had no name and no file associated with it. After backing up
that branch of the registry, I deleted the suspect key, and now my MSN
homepage loads every time. The registry key I deleted is:[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brows
er Helper Objects\{FDD3B846-8D59-4ffb-8758-209B6AD74ACC}]

 

[Guest]

Turns out that didn't solve the problem. The problem usually occurs the first time I run IE after rebooting. I rebooted several times last night, and the problem did not occur. But when I booted up this morning and ran IE, it did occur. I have a total of 5 BHO's installed. They are as follows

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
@="

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{243B17DE-77C7-46BF-B94B-0B5F309A0E64}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}
@="

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDF3E430-B101-42AD-A544-FADC6B084872}
@="NAV Helper

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDD3B846-8D59-4ffb-8758-209B6AD74ACC}

Henry - can you tell me if any of those are suspicious

Thanks

Kyl

 

[Frank Saunders, MS-MVP]

Turns out that didn't solve the problem. The problem usually occurs
the first time I run IE after rebooting. I rebooted several times
last night, and the problem did not occur. But when I booted up this
morning and ran IE, it did occur. I have a total of 5 BHO's
installed. They are as follows:

Henry - can you tell me if any of those are suspicious?

Thanks.

Kyle

Go to: http://mvps.org/winhelp2002/unwanted.htm
Download "Hijack This!" [freeware]

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates: "hijackthis.log")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, go to the "Spyware and Hijackware Removal" section.
Press "New Topic", copy and paste hijackthis.log into your new message.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

 

[H Leboeuf]

In line....

Turns out that didn't solve the problem. The problem usually occurs the

first time I run IE after rebooting. I rebooted several times last night,
and the problem did not occur. But when I booted up this morning and ran
IE, it did occur. I have a total of 5 BHO's installed. They are as
follows:[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brows
er Helper Objects]

@=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brows
er Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]

Probably not.
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} L BHO AcroIEhelper.ocx
AcroIEhelper.dll Adobe Acrobat reader[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brows
er Helper Objects\{243B17DE-77C7-46BF-B94B-0B5F309A0E64}]

Probably not.
{243B17DE-77C7-46BF-B94B-0B5F309A0E64} O BHO mnyside.dll Microsoft Money[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brows
er Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}]

@=""

Probably not.
{5CA3D70E-1895-11CF-8E15-001234567890} O BHO tfswshx.dll
Hewlett-Packard/Veritas DLA software[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brows
er Helper Objects\{BDF3E430-B101-42AD-A544-FADC6B084872}]

@="NAV Helper"

Probably not.
{BDF3E430-B101-42AD-A544-FADC6B084872} L BHO NavShExt.dll Norton Antivirus[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brows
er Helper Objects\{FDD3B846-8D59-4ffb-8758-209B6AD74ACC}]

Probably not.
{FDD3B846-8D59-4ffb-8758-209B6AD74ACC} O BHO mnyviewer.dll Microsoft Money

Henry - can you tell me if any of those are suspicious?

Thanks.

Kyle

My source: spywareinfo.com
A good resource to find the { CLSID I.D. } associated with these programs.
http://www.sysinfo.org/bhoinfo.php
--

Get AdAware and SpyBot and run them both. Keep them up to date.
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Download and run this one also if not using it.
http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch

http://www.spywareinfo.com/~merijn/downloads.html
http://www.spywareinfo.com/~merijn/files/cwshredder.zip
[Exe] http://www.spywareinfo.com/~merijn/files/CWShredder.exe



Henri Leboeuf
Web page: http://www.generation.net/~hleboeuf/index.htm