MSHP.DLL Redirect

[clearydj]

A dll has shown up in my windows directory that keeps
redirecting my home page to a "consumer goods" index
page. I removed the dll. I deleted the Default_page_url
in the registry. Reset defaults. The darn thing just
keeps coming back after a few uses.

Any suggestions are appreciated...
Thanks,
-Dan Cleary

 

[Guest]

Did you try c:/windows/options/cabs/setup.exe dubble click
it and windows will reinstall upon its self. to repair and
replace damaged or missing windows files?

 

[Frank Saunders, MS-MVP IE/OE]

A dll has shown up in my windows directory that keeps
redirecting my home page to a "consumer goods" index
page. I removed the dll. I deleted the Default_page_url
in the registry. Reset defaults. The darn thing just
keeps coming back after a few uses.

Any suggestions are appreciated...
Thanks,
-Dan Cleary

First eliminate any scumware.
See
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Note that AdAware and SpyBot S & D will each catch some things the other
won't. Also, each need to be updated before every use, even when just
downloaded.

If trying everything at that site does not fix the problem please post back
in the same thread.

--
Frank Saunders, MS-MVP IE/OE
http://www.fjsmjs.com
Reply to Newsgroup. I won't answer email
Protect Your PC
http://www.microsoft.com/security/protect/

 

[clearydj]

Dear Frank (& others interested),

Thanks for the suggestions. I finally "eliminated it" by
discovering several files in the application directory
for IE. A new folder had been created named "ieFeatsl"
where several application extensions were found. I
renamed these. Removed the dll (again) and the register
settings. Voila, the culprit "went away!"

I hope I got all of it. Pretty nasty and unpleasant.

Thanks,
-Dan

 

[H Leboeuf]

Get help from this forum. I know that they will like to have a copy of your
mshp.dll file if it's the culprit. Keep a copy handy in a floppy disk.

Go to http://www.spywareinfo.com/downloads.php#det
Download "Hijack This!" [freeware] or download direct (below):
http://www.merijn.org/files/hijackthis.zip

If you get a 404 error or Access denied, try:
http://216.180.252.218/~spywareinfo.com/downloads/tools/hijackthis.zip

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates "hijackthis.log")

Next, HijackThis | Config [button] | Misc Tools [button]
Click: Generate StartupList log [button] (generates "startuplist.txt")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, then copy and paste both files in your message.

HijackThis Quick Start Help
http://www.tomcoyote.org/hjt/

The Tutorial if you want to know more about the results or the .log file.
http://www.merijn.org/htlogtutorial.html

 

[H Leboeuf]

ieFeatsl if from this parasite. Get the removal tool and clean your
computer.

CoolWebSearch - CWS http://www.spywareinfo.com/articles/cws/
More: Complete list by variant with up-to-date information.
http://www.merijn.org/cwschronicles.html
More: Removal tool: http://www.merijn.org/files/cwshredder.zip
More: Removal tool:
http://www.symantec.com/avcenter/venc/data/vbs.bootconf.html
More: http://www.spywareguide.com/product_show.php?id=640
--

MSHP.DLL may or may not have come from it.

Henri Leboeuf
Web page: http://www.generation.net/~hleboeuf/index.htm