Changing Home page

[Gary]

Please advise: Why is my home page on Internet Explorer
6.0 changing without my input when I turn on my
computer? I have set my home page by using the Tools,
Properties, and then entering the URL. It stays on that
page until the following day when I turn on the computer
again. It opens to res://mshp.dll/index.html#10213 I
then have to go in and change it back. I would
appreciate any help on what to do to stop the program
from doing this. I have McAfee virus scan, and McAfee
Antispyware software and have cleaned and deleted
everything they suggest might be a problem, Thanks for
any help, Gary

 

[war17]

Some website has hijacked your homepage.

1. Use the following scanners to find and remove the website.

SpyBot S&D searches your harddisk for so-called spy- or adbots;
http://security.kolla.de/
or
Adaware
http://www.lavasoftusa.com/software/adaware/
or
CoolWebShredder
http://www.spychecker.com/program/coolwebshredder.html

2. Some porn websites redirects links to their websites using your HOSTS
file. Do a search for the HOSTS (without extension) file and remove the
entry.

3. If still no joy, download HijackThis from Spywareinfo download page

http://www.spywareinfo.com/program/hijackthis.html

Run the program and you will find many entries. Most are OK. Post the log. I
will find the problem for you.

4. For future preventive maintenance, turn off ActiveX.

 

[Mike Burgess]

Gary,
mshp.dll = Coolwebsearch trojan

Requires CWShredder 1.56.2
http://www.spywareinfo.com/~merijn/files/cwshredder.zip
Note: if needed - right-click and select: "Save Target As"
Updated for a new distribution method of the mshp.dll (iefeatsl) variant.

How to remove Coolwebsearch and affiliates
http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch

Note: this type hijack indicates an unpatched machine, that is lacking
in "Defense". Please visit Windows Update to avoid these exploits.

Note: be *sure* to follow-up with HijackThis
Post back with the URL where you posted if you want help with your log.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 04-09-04]
Please post replies to this Newsgroup, email address is invalid