Weird IE problem...possible spyware - Tilted Forum Project Discussion Community

JayRock · 02-18-2004, 07:25 PM

when I start up IE it replaces my homepage with this: res://mshp.dll/index.html#10213 and when I do a search on google i get another page that pops up with this address: http://search-company.com/search.php...ards&pin=10213 (biz card is just the search title). And while im surfing i get random popups that have a title of "Only The Best" but the ads range from sex to personals.

I have Ad Aware with the newest dats and Spy Bot and neither have been able to get rid of my problem. I deleted the mshp.dll because i opened it in notepad and noticed it was full of html code, but it keeps coming back and re-populating.

I havnt installed anything new and I sure as hell dont open strange emails or install foreign programs. It just showed up one day.

Does anyone know what it is and how I can get rid of it? Its really annoying and Im beginning to think I just need to reformat and I really dont want to do that since I did it not more than a month ago.

Thanks for any help.

BTW: im running windows XP sp2 with all the latest updates and security patches.

_the_wombat · 02-18-2004, 07:35 PM

Try out Hijackthis.

losthellhound · 02-19-2004, 07:04 AM

Check in Internet Explorer to see if your home page or start page is set to something strange.. If it is, cjange it there. Check your start menu for HTML pages or links as well. In IE, move your security settings up a notch so that script cant pop through without you being notified.

hope this helps

Astrocloud · 02-20-2004, 03:57 PM

It's a trojan horse

http://tfproject.org/tfp/showthread....threadid=30169

thezel · 02-20-2004, 04:12 PM

It is a trojan horse, there is a free program called spybot that will take care of this problem. Just make sure after you install it you update the definitions and then run it. Here is the url for it:

http://www.safer-networking.org/index.php?page=download

02-18-2004, 07:25 PM	#1 (permalink)
JayRock Upright Location: Turn left down that street then right and im on the left	Weird IE problem...possible spyware when I start up IE it replaces my homepage with this: res://mshp.dll/index.html#10213 and when I do a search on google i get another page that pops up with this address: http://search-company.com/search.php...ards&pin=10213 (biz card is just the search title). And while im surfing i get random popups that have a title of "Only The Best" but the ads range from sex to personals. I have Ad Aware with the newest dats and Spy Bot and neither have been able to get rid of my problem. I deleted the mshp.dll because i opened it in notepad and noticed it was full of html code, but it keeps coming back and re-populating. I havnt installed anything new and I sure as hell dont open strange emails or install foreign programs. It just showed up one day. Does anyone know what it is and how I can get rid of it? Its really annoying and Im beginning to think I just need to reformat and I really dont want to do that since I did it not more than a month ago. Thanks for any help. BTW: im running windows XP sp2 with all the latest updates and security patches.

02-19-2004, 07:04 AM	#3 (permalink)
losthellhound Thats MR. Muffin Face now Location: Everywhere work sends me	Check in Internet Explorer to see if your home page or start page is set to something strange.. If it is, cjange it there. Check your start menu for HTML pages or links as well. In IE, move your security settings up a notch so that script cant pop through without you being notified. hope this helps __________________ "Life is possible only with illusions. And so, the question for the science of mental health must become an absolutely new and revolutionary one, yet one that reflects the essence of the human condition: On what level of illusion does one live?" -- Ernest Becker, The Denial of Death

02-18-2004, 07:35 PM	#2 (permalink)
_the_wombat Tilted	Try out Hijackthis.

02-20-2004, 03:57 PM	#4 (permalink)
Astrocloud Apocalypse Nerd	It's a trojan horse http://tfproject.org/tfp/showthread....threadid=30169

02-20-2004, 04:12 PM	#5 (permalink)
thezel Upright Location: mass	It is a trojan horse, there is a free program called spybot that will take care of this problem. Just make sure after you install it you update the definitions and then run it. Here is the url for it: http://www.safer-networking.org/index.php?page=download