res://rrsyk.dll/index.html#96676

[Hope Ross]

This keeps coming up as my homepage. I went into the
registry and cleaned this url. I also found the *.dll file
in my c:\windows directory and deleted. It is still
showing as my homepage.

Thanks in advance.

 

[PA Bear]

Check your system for "hijackware":

Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm

CoolWebSearch Chronicles
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run these tools in the following order with nothing else running in
background:

1. CWShredder (fix all found)

2. Ad-Aware (fix all found)

3. Spybot (RTFM but generally fix everything in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before each
and every use, even "right out of the box". But even they can't catch
everything, 24/7. When all else fails, HijackThis
(http://www.spywareinfo.com/~merijn/files/HijackThis.exe) is the preferred
tool to use. It will help you to both identify and remove any
hijackware/spyware. **Post your files to http://forums.spywareinfo.com/ or
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

Also:

1. Download and run Stinger (http://vil.nai.com/vil/stinger/); then...

2. Update your virus definitions, enable Show Hidden Files
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339)
and then run a full system scan in Safe Mode
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406)
with nothing else running in background.

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957

--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

What You Should Know About Spyware
http://www.microsoft.com/mscorp/twc/privacy/spyware.mspx

 

[Ray CPA 2686]

I have the same problem, except my shows up to be the
following: res://recjh.dll/index.html#96676 I too
deleted and changed this information in the registry and
nothing happens, it keeps coming back as the home page.
Further, most of the time now my web browswer will not
immediately close and seems to hang until I click on the
X several times. I hate these people that create crap
like these people with this deal with our home page.

 

[Roberto Parodi]

I have the same problem, except my shows up to be the
following: res://recjh.dll/index.html#96676 I too
deleted and changed this information in the registry and
nothing happens, it keeps coming back as the home page.
Further, most of the time now my web browswer will not
immediately close and seems to hang until I click on the
X several times. I hate these people that create crap
like these people with this deal with our home page.

hello i'm roberto from genoa italy i have the same problem with the
index.html#96676... this page is installed with home page in internet
explorer and it is impossible to change it. Also if you try to change
with Internt Options in tools of internet explorer. I think that this
spyware change the fist part for any new contamination... becuase you
have res://rrsyk.dll, while i have res://pzexk.dll/index.html#96676...
please the webdirector of this group to make a segnalation of this for
all bye roberto

 

[Martin Kloter]

You are probably a victim of this beast:
http://forums.spywareinfo.com/index.php?showtopic=7447

Sombody is working for automatic removing:
http://www.spywareinfo.com/~merijn/

Did it help to you?
Martin