Democratic Underground Latest Greatest Lobby Journals Search Options Help Login
Google

MS Internet Explorer/XP gurus, please help!

Printer-friendly format Printer-friendly format
Printer-friendly format Email this thread to a friend
Printer-friendly format Bookmark this thread
This topic is archived.
Home » Discuss » The DU Lounge Donate to DU
 
CanuckAmok Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jan-27-04 09:15 PM
Original message
MS Internet Explorer/XP gurus, please help!
Help, somehow I've picked up a program which keeps installing:

res://mshp.dll/index.html#22776

as my IE homepage.

I have run Norton Anti-virus, and Adaware 6 in hopes of making it stop, but no dice.

Can anyone help?!
Printer Friendly | Permalink |  | Top
GAspnes Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jan-27-04 09:16 PM
Response to Original message
1. try this
Printer Friendly | Permalink |  | Top
 
democracyindanger Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jan-27-04 09:17 PM
Response to Original message
2. Try here
http://www.annoyances.org/exec/forum/winxp/n1072895498

"Hey, My homepage keeps changing to res://mshp.dll/index.html#22776 everytime I try checking it. I ran ad ware 6, and it deleted around 300 items but it still changes. What should I try now?"

Lots of subposts in the thread. Hope that helps.
Printer Friendly | Permalink |  | Top
 
ironflange Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jan-27-04 09:28 PM
Response to Original message
3. Try this
Printer Friendly | Permalink |  | Top
 
sybylla Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jan-27-04 09:41 PM
Response to Reply #3
4. or try this
Printer Friendly | Permalink |  | Top
 
tkmorris Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jan-27-04 10:05 PM
Response to Original message
5. Browser Hijacker
This tool should fix that. CWShredder, available here: http://www.softpedia.com/public/cat/10/17/10-17-150.shtml
Printer Friendly | Permalink |  | Top
 
LTR Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jan-27-04 10:45 PM
Response to Original message
6. Sounds like a browser hijack
Edited on Tue Jan-27-04 10:47 PM by RatTerrier
Check this out and bookmark:

http://217.115.153.73/parasite/

All you need to know about nasty hijackers.

AdAware and Norton will do nothing to remedy this. It's merely an obnoxious script that changes the 'HOSTS" file on your hard drive.

Also, ditch IE and get a decent browser, like Avant: http://www.avantbrowser.com

And stop looking at porn sites.
Printer Friendly | Permalink |  | Top
 
tkmorris Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Jan-28-04 12:13 AM
Response to Reply #6
7. LOL@ the porn site thing
Too true.

All 5 of us here have our own computers and with 3 teenage girls we get lots of computer problems. I have found that most of our trouble comes from:

1)Doll-making sites. It's a girl thing I guess but give em paint shop and a template and they'll stay busy for hours. Unfortunately an inordinate number of those sites contain malicious code, and many have porn anime (Hentai) pop-ups. Bad news.

and 2) Song lyrics sites. Makes no sense to me but I have had two reformats occur after a simple Google search for lyrics.

Also be wary of Warez sites, emulator and game rom sites, and there are a couple of big survey sites with nasty spyware scripts as well, I forget which.

Printer Friendly | Permalink |  | Top
 
CanuckAmok Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Jan-28-04 12:17 AM
Response to Reply #7
8. Hmm...
I use a lyrics database from Russia...I'm wondering if that's where I picked this up, since I don't use *this* computer for porn...
Printer Friendly | Permalink |  | Top
 
LTR Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Jan-28-04 09:32 AM
Response to Reply #7
11. Doll-making sites
I just reloaded a system the other day for someone. She said her homepage was changed to some doll-making site, and assumed her daughter changed it.

I guess it's a hijacker.

Like I said, get rid of IE. Stupid browser hasn't been updated in over two years. Get Avant or Mozilla.
Printer Friendly | Permalink |  | Top
 
ironflange Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Jan-28-04 12:43 AM
Response to Reply #6
10. Avant is nice, but it's still IE
Not sure it would fix that.

Printer Friendly | Permalink |  | Top
 
LTR Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Jan-28-04 09:34 AM
Response to Reply #10
12. It's built on IE, true
But it is more functional and secure. And it is updated often.

The more current releases seem much more secure. And I tweaked the settings to avoid hajacking. Haven't run into many lately.



Printer Friendly | Permalink |  | Top
 
ConcernedCanuk Donating Member (1000+ posts) Send PM | Profile | Ignore Wed Jan-28-04 12:36 AM
Response to Original message
9.  . It's a bit of reading, but I'd check this out b4 doing anything - -
.
.

In reading some othe info, I noticed that the complaints were all a derivitave of " mshp.dll/index.html#22776" - but the number was not the same

seaching just " mshp.dll/index.html# "

came up with ONE result

....................................................................

Virus Encyclopedia Search Results
<< Search Again

1 - 1 of 1 records match your query



TROJ_IEFEATS.A

This memory-resident Trojan drops Browser Helper Objects (BHO) in the My Documents folder of a target machine. The dropped files, which automatically executes once the Internet browser opens, are a...



Search for mshp.dll/index.html# in all Trend Micro pages
Search for mshp.dll/index.html# in our Knowledge Base

......................................................................

Follow this link

http://www.trendmicro.com/vinfo/virusencyclo/default2.asp?m=q&virus=mshp%2Edll%2Findex%2Ehtml%23&alt=mshp%2Edll%2Findex%2Ehtml%23
Printer Friendly | Permalink |  | Top
 
DU AdBot (1000+ posts) Click to send private message to this author Click to view 
this author's profile Click to add 
this author to your buddy list Click to add 
this author to your Ignore list Sat Jan 04th 2025, 11:53 PM
Response to Original message
Advertisements [?]
 Top

Home » Discuss » The DU Lounge Donate to DU

Powered by DCForum+ Version 1.1 Copyright 1997-2002 DCScripts.com
Software has been extensively modified by the DU administrators


Important Notices: By participating on this discussion board, visitors agree to abide by the rules outlined on our Rules page. Messages posted on the Democratic Underground Discussion Forums are the opinions of the individuals who post them, and do not necessarily represent the opinions of Democratic Underground, LLC.

Home  |  Discussion Forums  |  Journals |  Store  |  Donate

About DU  |  Contact Us  |  Privacy Policy

Got a message for Democratic Underground? Click here to send us a message.

© 2001 - 2011 Democratic Underground, LLC