06-26-04 03:04 PM
Saw this at SpywareInfo Forums:
http://forums.spywareinfo.com/index.php?showtopic=8847
<paste>
In the last few days ... This infection:
res://<random>.dll/<random>.html#<random> has spread like wildfire and we
are inundated with requests to help clear it. Sometimes the fixes that have
been created work, sometimes not - Unfortunately.
There has been some reported fixes by ensuring that you have a firewall
installed like Zonealarm and having it block the calls out to the Internet.
That, with a complete scan using the latest version of Ad-aware seems to
clear it up - Somewhat.
Ad-Aware should be file : v6.0 Build 6.181 and you should have referrence
file: 01R324 22.06.2004 installed. Please update your copy of ad-aware and
boot into safe mode and run it, before posting a request for help. (How do I
boot into "Safe" mode?)
It appears that ad-aware is cleaning the files etc but not deleting the
registry entries associated with the clean so they may still show up in the
HijackThis log. If you still get the entries after booting into normal mode
and are not sure what to delete, post your log in the forum but mention what
version of ad-aware you run as well as the reference file version - This
will help in the resolution.
Also - If you request help, DO NOT reboot your computer until you receive a
response as the files change as soon as you reboot. If you receive no
response and you have rebooted - Post a new HijackThis log into your current
message - DO NOT start a new message again as we cannot keep up with all the
calls.
<paste/>
HTH -
--
LuckyStrike
LS@smokedamagedfurniture.youcandriveitawaytoday.com
--------------------------------------------------------------------
"Alan" <anonymous@discussions.microsoft.com> wrote in message
news:2130601c45a5c$9951c320$a101280a@phx
.gbl...
> This is a most insidious website:
> res://mshp.dll/index.html#37049
> I have spent hours of my time trying to stop this website
> from hijacking my homepage. Have downloaded Spybot Search
> and Destroy, Spyblaster, NoAdware6 - and nothing seems to
> work. Does anybody have any suggestions on how to stop
> this website from hijacking my hompage; and also, would
> love to find out who is personally responsible for this
> website and where it originates. I would pay this person
> a visit - in the flesh. If you have any thoughts about
> how to get rid of this website, please email Al at
> apt@sev.org Thanks.
> al
[ Post a follow-up to this message ]
| 
