home page hijack

The following link has hijacked my homepage:

res://msaps.dll/index.html

Spybot does not fix the problem, and after reading about 25 postings on this
I see that I have to be an uber-tech to stop it. Can someone give me a
simple way to actually get rid of this problem? I do not have the technical
knowledge to go into my registry and tinker around - I'll simply cause more
problems. How come microsoft can't simply send out a patch to fix this?
Isn't Microsoft concerned with a site that calls itself MS-Search?

Elkmanjr
Sun Aug 08 12:51:02 CDT 2004

Great question! I have the same issue. Further, I have run both Spybot and
Norton Internet Security and have not been able to locate the bug. It's very
irritating!

Another observation, when I do the "ctrl-alt-del" and check usage, I notice
that 2 "iexplore.exe"'s are running even though I am not using Internet
Explorer. When I select "end program" it does not end either instance of
iexplorer. Is there a new virus/adware of which Norton or Microsoft is
unaware?

Please help!

"memccab" wrote:

> The following link has hijacked my homepage:
>
> res://msaps.dll/index.html
>
> Spybot does not fix the problem, and after reading about 25 postings on this
> I see that I have to be an uber-tech to stop it. Can someone give me a
> simple way to actually get rid of this problem? I do not have the technical
> knowledge to go into my registry and tinker around - I'll simply cause more
> problems. How come microsoft can't simply send out a patch to fix this?
> Isn't Microsoft concerned with a site that calls itself MS-Search?

anonymous
Sun Aug 08 13:56:05 CDT 2004

The best solution I have found was to type the hijacker's
name in google and look for other places that deal with
this problem. I had the same problem, but it's gone now.
Sorry I can remember the name of the site. You need to
spend a few hours and you should be fine.


>-----Original Message-----
>Great question! I have the same issue. Further, I have
run both Spybot and
>Norton Internet Security and have not been able to
locate the bug. It's very
>irritating!
>
>Another observation, when I do the "ctrl-alt-del" and
check usage, I notice
>that 2 "iexplore.exe"'s are running even though I am not
using Internet
>Explorer. When I select "end program" it does not end
either instance of
>iexplorer. Is there a new virus/adware of which Norton
or Microsoft is
>unaware?
>
>Please help!
>
>"memccab" wrote:
>
>> The following link has hijacked my homepage:
>>
>> res://msaps.dll/index.html
>>
>> Spybot does not fix the problem, and after reading
about 25 postings on this
>> I see that I have to be an uber-tech to stop it. Can
someone give me a
>> simple way to actually get rid of this problem? I do
not have the technical
>> knowledge to go into my registry and tinker around -
I'll simply cause more
>> problems. How come microsoft can't simply send out a
patch to fix this?
>> Isn't Microsoft concerned with a site that calls
itself MS-Search?
>.
>

Kent
Sun Aug 08 18:13:21 CDT 2004

Elkmanjr wrote:

> Great question! I have the same issue. Further, I have run both Spybot and
> Norton Internet Security and have not been able to locate the bug. It's very
> irritating!

This is the AboutBlank or res variant of CoolWebSearch. The only tool I
know that removes it is AboutBuster. CWShredder doesn't remove it.

http://www.downloads.subratam.org/AboutBuster.zip

However, I would advise posting a HiJackThis log to
forums.spywareinfo.com and getting expert analysis.

http://forums.spywareinfo.com/index.php?showforum=18

--
Kent W. England, Microsoft MVP for Windows Security

Phillip
Mon Aug 09 12:01:34 CDT 2004

I have gotten rid of it very easily with a combination of CWS Shredder and
Spy Sweeper. None of the others were able to remove it.

When those finish running, go to the Internet Settings of the Browser, got
to the "Programs" Tab, click the "Reset Web Settings" button.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com


"memccab" <memccab@discussions.microsoft.com> wrote in message
news:0F563C5A-3C3F-4E50-B43B-1FC48D558DEE@microsoft.com...
> The following link has hijacked my homepage:
>
> res://msaps.dll/index.html
>
> Spybot does not fix the problem, and after reading about 25 postings on
this
> I see that I have to be an uber-tech to stop it. Can someone give me a
> simple way to actually get rid of this problem? I do not have the
technical
> knowledge to go into my registry and tinker around - I'll simply cause
more
> problems. How come microsoft can't simply send out a patch to fix this?
> Isn't Microsoft concerned with a site that calls itself MS-Search?

llturbini
Mon Aug 09 16:33:37 CDT 2004

Best IE hijack advice ever! Thank you.

Phillip
Tue Aug 10 15:01:33 CDT 2004

You're welcomed, Sir!

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

"Lenny" <llturbini@hotmail.com> wrote in message
news:95b15faa.0408091333.60b56ccc@posting.google.com...
> Best IE hijack advice ever! Thank you.