SLCentral - Your logical choice for computing and technology
Latest Deals   
Navigation
  • Home
  • Search
  • Forums
  • Hardware
  • Games
  • Tech News
  • Deals
  • Prices
  • A Guru's World
  • CPU/Memory Watch
  • Site Info
  • SL Newsletter
    Recieve bi-weekly updates on news, new articles, and more


    Forum home My SLBoards (Control Panel)View the calendar View the members list Read the FAQ Search the forums

    Go Back   SLCentral Forum > Technology > Software / Operating Systems
    User Name
    Password


    Reply
     
    Thread Tools Search this Thread Display Modes
      #1  
    Old 05-08-04, 10:36 PM
    Dave's Avatar
    Dave Dave is offline
    ActiveTuning Partner
     
    Join Date: Dec 2000
    Location: University Of Maryland
    Posts: 1,873
    Dave is on a distinguished road
    Send a message via AIM to Dave
    Default Damnit, how do I fix this?

    Somehow everytime I open explorer my homepage keeps resetting to this:

    res://mshp.dll/index.html#37049

    Some sort of spam thing, but how can I fix this and get it off my puter?
    __________________
    ActiveTuning - Partner & Director Of Sales & Marketing

    Reply With Quote
      #2  
    Old 05-09-04, 07:21 AM
    extremepc's Avatar
    extremepc extremepc is offline
    SLCentral Senior Editor
     
    Join Date: Dec 2001
    Location: Princeton, NJ
    Posts: 1,632
    extremepc is on a distinguished road
    Send a message via ICQ to extremepc Send a message via AIM to extremepc Send a message via Yahoo to extremepc
    Default

    Have you tried ad-aware?
    __________________
    --Daniel--
    Reply With Quote
      #3  
    Old 05-09-04, 08:16 AM
    Paul's Avatar
    Paul Paul is offline
    Student-for-life
     
    Join Date: Dec 2000
    Location: College Park, Maryland
    Posts: 1,294
    Paul is off the scale
    Send a message via ICQ to Paul Send a message via AIM to Paul
    Default

    If all else fails, then you could do a

    [ricola voice]Reeeeeeeeeeeeeeeeeeeeeeeeeeeformat[/ricola voice]
    __________________
    paul@pleaseohpleasedontspamme.slcentral.com
    A mathematician is a device for turning coffee into theorems -- P. Erdos
    Reply With Quote
      #4  
    Old 05-09-04, 08:24 AM
    Dave's Avatar
    Dave Dave is offline
    ActiveTuning Partner
     
    Join Date: Dec 2000
    Location: University Of Maryland
    Posts: 1,873
    Dave is on a distinguished road
    Send a message via AIM to Dave
    Default

    Lol, I tried it, and it keeps blocking whatever is making the registry change...so I'm thinking virus scanner to take it off completely?
    __________________
    ActiveTuning - Partner & Director Of Sales & Marketing

    Reply With Quote
      #5  
    Old 05-09-04, 12:08 PM
    Talon's Avatar
    Talon Talon is offline
    SLCentral Chief Editor
     
    Join Date: Apr 2004
    Location: Carmel, IN
    Posts: 246
    Talon is on a distinguished road
    Default

    trace it with ad aware or norton, and if it will not allow you to delete it, go into the dir and do it manually.
    Reply With Quote
      #6  
    Old 05-09-04, 12:25 PM
    extremepc's Avatar
    extremepc extremepc is offline
    SLCentral Senior Editor
     
    Join Date: Dec 2001
    Location: Princeton, NJ
    Posts: 1,632
    extremepc is on a distinguished road
    Send a message via ICQ to extremepc Send a message via AIM to extremepc Send a message via Yahoo to extremepc
    Default

    On the website that it forwards you to in IE, there may be some software to get rid of the bug. I had the same problem, only I was forwarded to Searchcentral.cc, and I just used the software on the site and had no problems from then on.
    __________________
    --Daniel--
    Reply With Quote
      #7  
    Old 05-09-04, 04:31 PM
    stevecentral's Avatar
    stevecentral stevecentral is offline
    Webmaster
     
    Join Date: Nov 2002
    Location: UK
    Posts: 1,330
    stevecentral is on a distinguished road
    Default

    From http://www.pchell.com/support/lookfor.shtml

    How did my homepage get set to res://mshp.dll/index.html#10213 or something similar?
    Here's another example of the many variants of the Coolwebsearch homepage hijacker. It changes your homepage to res://mshp.dll/index.html#10213. Although using the normal steps to remove one of the many variants of coolwebsearch should remove it, it appears this variant is also part of a trojan virus called TROJ_IEFEATS.A . Because of this I have modified these directions to include instructions for removing the possible trojan as well as the homepage hijacker.

    How do I Remove Lookfor.cc homepage hijacker and IEFEATS.A trojan?

    1) Start Windows in Safe Mode by pressing F8 as the computer is booting and choosing Safe Mode

    2) Remove the Registry entries

    Click on Start, Run, Regedit
    In the left panel go to
    HKEY_CURRENT_USER>Software>Microsoft>Windows>Current Version>Runonce

    In the right panel, right-click and delete the following entry (if it exists)
    iefeats1Update = "rundll32 <path to virus>\iefeats1.dll,UpdateDlls"

    Close the Registry Editor
    3) Delete the infected files (for Windows ME and XP remember to turn off System Restore before searching for and deleting these files to remove infected backed up files as well)

    Click Start, point to Find or Search, and then click Files or Folders.
    Make sure that "Look in" is set to (C:\WINDOWS).
    In the "Named" or "Search for..." box, type, or copy and paste, the file names:
    IEFEATSL.DLL
    MSIESH.DLL
    SUBMITHOOK.DLL
    UNINSTALL.EXE
    UNINSTALL.INI
    MSHP.DLL
    Click Find Now or Search Now.
    Delete the displayed files.
    4) Reset Internet Explorer Homepage and Search Page

    Close all Internet Explorer windows.
    Open Control Panel. Click Start>Settings>Control Panel.
    Double-click the Internet Options icon.
    In the Internet Properties window, click the Programs tab.
    Click the “Reset Web Settings…” button.
    Select “Also reset my home page.” Click Yes.
    Click OK.
    4) Reboot the computer and download and run CWShredder, created by Merijn of Spywareinfo.com. Merijn has an entire page devoted to CoolWebSearch and its many variants.

    You can download CWShredder by clicking on this link.

    5) Run a thorough virus scan using your favorite antivirus program or Housecall, Trend Micro's online virus scanner.
    __________________
    SLCentral does it better www.slcentral.com/

    Reply With Quote
      #8  
    Old 05-09-04, 04:51 PM
    Talon's Avatar
    Talon Talon is offline
    SLCentral Chief Editor
     
    Join Date: Apr 2004
    Location: Carmel, IN
    Posts: 246
    Talon is on a distinguished road
    Default

    Wow, very comprehensive. It should be all you need Dave. The "download by clicking this link" does not work, but that can easily accessed by visiting the web page.
    Reply With Quote
      #9  
    Old 05-09-04, 06:57 PM
    Dave's Avatar
    Dave Dave is offline
    ActiveTuning Partner
     
    Join Date: Dec 2000
    Location: University Of Maryland
    Posts: 1,873
    Dave is on a distinguished road
    Send a message via AIM to Dave
    Default

    You're the man Steve! Fixed! It was messing up other stuff too...SL was loading super slow
    __________________
    ActiveTuning - Partner & Director Of Sales & Marketing

    Reply With Quote
      #10  
    Old 05-21-08, 07:04 AM
    Softix Softix is offline
    Registered User
     
    Join Date: Dec 2007
    Posts: 26
    Softix is on a distinguished road
    Default Man, I've got the same problems

    Hi,

    I too had the same problem in my system. Even when i re-installed my Os, everything was in vain. Finally, i got a damn simple solution. Simply use Zone- Alarm. It removes all these sort of bugs.
    Reply With Quote
    Reply


    Thread Tools Search this Thread
    Search this Thread:

    Advanced Search
    Display Modes

    Posting Rules
    You may not post new threads
    You may not post replies
    You may not post attachments
    You may not edit your posts

    vB code is On
    Smilies are On
    [IMG] code is On
    HTML code is Off
    Forum Jump



    All times are GMT -8. The time now is 09:58 PM.

    Archive - Search Engine Friendly URLs by vBSEO 3.0.0 RC6 © 2006, Crawlability, Inc. Top
    Browse the various sections of the site
    Hardware
    Reviews, Articles, News, All Reviews...
    Gaming
    Reviews, Articles, News...
    Regular Sections
    A Guru's World, CPU/Memory Watch, SLDeals...
    SLBoards
    Forums, Register(Free), Todays Discussions...
    Site Info
    Search, About Us, Advertise...
    Powered by: vBulletin Version 3.0.1
    Copyright ©2000 - 2018, Jelsoft Enterprises Ltd. Search Engine Friendly URLs by vBSEO 3.0.0 RC6 © 2006, Crawlability, Inc.
    Legal | Advertising | Site Info