Start Page / Search Page Parasite

[Marty]

Some software on my pc changes the start page and search
page of internet explorer as soon as it is started.

These changes are made in the USER and SYSTEM files of the
Windows Directory.

When I change the above files using the reset web settings
option, close IE and start IE back up, it comes up
correctly with the start page but changes it for future
startups. Therefore something is changing these settings
upon the startup of IE.

Adware and Spybot Search and Destroy does not detect this
software.

Even after reinstalling IE, the same thing happens.

Start Page is changed to:
res://mshp.dll/index.html#10213

When run google, the following search popup appears:
http://search-company.com/search.php?

And even if I delete the file (mshp.dll), it gets created
again right away when starting IE.
This does not happen within AOL, Netscape, or MSN Explorer.

Any suggestions?

Thanks

 

[Frank Saunders, MS-MVP IE/OE]

Some software on my pc changes the start page and search
page of internet explorer as soon as it is started.

These changes are made in the USER and SYSTEM files of the
Windows Directory.

When I change the above files using the reset web settings
option, close IE and start IE back up, it comes up
correctly with the start page but changes it for future
startups. Therefore something is changing these settings
upon the startup of IE.

Adware and Spybot Search and Destroy does not detect this
software.

Even after reinstalling IE, the same thing happens.

Start Page is changed to:
res://mshp.dll/index.html#10213

When run google, the following search popup appears:
http://search-company.com/search.php?

And even if I delete the file (mshp.dll), it gets created
again right away when starting IE.
This does not happen within AOL, Netscape, or MSN Explorer.

Any suggestions?

Thanks

First eliminate any scumware.
See
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Note that AdAware and SpyBot S & D will each catch some things the other
won't. Also, each need to be updated before every use, even when just
downloaded.

If trying everything at that site does not fix the problem please post back
in the same thread.

--
Frank Saunders, MS-MVP IE/OE
http://www.fjsmjs.com
Reply to Newsgroup. I won't answer email
Protect Your PC
http://www.microsoft.com/security/protect/

 

[DVarnau]

Marty,
Were Ad-aware and Spybot updated before use?

Try: CWShredder (The CoolWebSearch Chronicles)
http://www.spywareinfo.com/~merijn/cwschronicles.html
Download links at the bottom of the page.

If unsuccessful with CWShredder, go to HijackThis Quick Start at
http://www.tomcoyote.org/hjt/
Read the instructions, download HijackThis and post a log to
the Spyware and Hijackware Removal Support Forum at
http://forums.spywareinfo.com/
or
the Hijackthis Logs And Problems Forum at
http://tomcoyote.org/forums/

Additional information at:
Dealing with Unwanted Spyware and Parasites:
http://mvps.org/winhelp2002/unwanted.htm

Hope this helps,
Don

 

[Rhinohelix]

Go to http://www.spywareinfo.com/downloads.php?cat=sp#det and download
CWShredder. This is malware which avoids adaware, et al. at this
time, but CWshredder specifically targets it. Good luck!