Homepage problem

[chicane]

Something keeps to changing my internet explorer home page to 'about:blank' any ideas what?

[simpo two]

Spyware. If you search, you'll find what to do: namely AdAware, Spybot and a few others.

>> Edited by simpo two on Friday 16th July 20:29

[TommoFocus]

www.spychecker.com/program/hijackthis.html

d/l this program and run it, post the results back in here and I will tell you which bits to delete.

[steve-p]

Seems an unusually benign thing for spyware to do. I want my home page to be about:blank!

[TommoFocus]

http://computercops.biz/postt43426.html

[chicane]

Thanks for your help, problem sorted. Is there any freeware you can leave running in the background to prevent this stuff getting onto your computer in the first place?

[slinky]

I'm not sure about freeware, but I know that Adaware is capable of running in the background and monitoring for these attacks!

hth

slinky

[FunkyNige]

There's some called SpywareBlaster
www.javacoolsoftware.com/spywareblaster.html

And Spybot also helps
www.safer-networking.org/en/index.html

They both run in the background blocking things, I think Ad-Aware will do it, but only if you upgrade to the premium version, these are both free.

[TommoFocus]

A virus proggy like Sophos and Pop-up stopper along with Spybot - Search and Destroy, they are all I use and I havent had a problem for months...... touch wood!!!

[chicane]

Unfortunately it didn't work after all.

TommoFocus said:

http://computercops.biz/postt43426.html

This link is helpful but I'm not sure what to do. I'm running Win98 and I don't know how to 'boot using Windows Recovery Console'.

Any ideas?

Looking at that forum it was saying that the files could be found in /system32, I found a stopzilla.dll file, what is it and should i delete it?

any help greatly appreciated.

[TommoFocus]

Easiest way to get help is to use google and do a search like, I found this at the top of the search results page:
www.short-media.com/forum/showthread.php?t=13743

[chicane]

I'm struggling to find which file I need deleting, anyone able to make any sense of this:
Module information for 'IEXPLORE.EXE'
MODULE BASE SIZE PATH
INDICDLL.DLL 7cb30000 24576 C:WINDOWSSYSTEMINDICDLL.DLL 4.10.1998 Keyboard Language Indicator Shell Hook extension
PLX_HOOK.DLL 2940000 20480 C:WINDOWSPLAXO1.5.2.32PLX_HOOK.DLL 1.5.2.32 plx_hook
IMGHOOK.DLL 30000000 69632 C:PROGRAM FILESIOMEGATOOLSIMGHOOK.DLL 6, 1, 1, 1 IMGHOOK
SHDOCLC.DLL 716c0000 339968 C:WINDOWSSYSTEMSHDOCLC.DLL 5.00.2919.6307 Shell Doc Object and Control Library
MSHTML.DLL 70c30000 2363392 C:WINDOWSSYSTEMMSHTML.DLL 5.00.2919.6307 Microsoft (R) HTML Viewer
QUESTMOD.DLL 28d0000 57344 C:WINDOWSQUESTMOD.DLL
MFC42.DLL 6c370000 991232 C:WINDOWSSYSTEMMFC42.DLL 6.00.8665.0 MFCDLL Shared Library - Retail Version
MADOPEW.DLL 28c0000 45056 C:WINDOWSMADOPEW.DLL
MSOPT.DLL 28b0000 28672 C:WINDOWSMSOPT.DLL
LINKINFO.DLL 7fb80000 36864 C:WINDOWSSYSTEMLINKINFO.DLL 4.10.1998 Windows Volume Tracking
ACROIEHELPER.OCX 1b40000 32768 C:PROGRAM FILESADOBEACROBAT 5.0READERACTIVEXACROIEHELPER.OCX 1, 0, 0, 1 AcroIEHelper Module
MLANG.DLL 70410000 532480 C:WINDOWSSYSTEMMLANG.DLL 5.00.2919.6304 Multi Language Support DLL
MSXML3.DLL 72e00000 1130496 C:WINDOWSSYSTEMMSXML3.DLL 8.20.8730.1 XML OM
MSNTB.DLL 2340000 212992 C:PROGRAM FILESMSN TOOLBAR 1.01.1629.0EN-GBMSNTB.DLL 01.01.1629.0 MSN Toolbar extension
MTBRES.DLL 22c0000 110592 C:PROGRAM FILESMSN TOOLBAR 1.01.1629.0EN-GBMTBRES.DLL 01.01.1629.0 MSN Toolbar resource library
YCOMP5_2_3_0.DLL 68000000 299008 C:PROGRAM FILESYAHOO!COMMONYCOMP5_2_3_0.DLL 2003, 8, 12, 1 Yahoo! Companion 5.2 for Internet Explorer
NAVSHEXT.DLL 2950000 106496 C:PROGRAM FILESNORTON ANTIVIRUSNAVSHEXT.DLL 8.07.17 Norton AntiVirusNAVShellExt Module
MSVCP60.DLL 780c0000 397312 C:WINDOWSSYSTEMMSVCP60.DLL 6.00.8972.0 Microsoft (R) C++ Runtime Library
ATL.DLL 5f3e0000 73728 C:WINDOWSSYSTEMATL.DLL 3.00.8449 ATL Module for Windows (ANSI)
MSH_ZWF.DLL 61220000 73728 C:PROGRAM FILESMICROSOFT HARDWAREMOUSEMSH_ZWF.DLL 4.10.0851.0 Microsoft IntelliPoint
MYDOCS.DLL 792f0000 69632 C:WINDOWSSYSTEMMYDOCS.DLL 4.72.3510.2300 My Documents Folder UI
MSI.DLL 1b50000 2015232 C:WINDOWSSYSTEMMSI.DLL 2.0.2600.1 Windows Installer
MSONSEXT.DLL 379b0000 573440 C:PROGRAM FILESCOMMON FILESMICROSOFT SHAREDWEB FOLDERSMSONSEXT.DLL
RASAPI32.DLL 7f880000 217088 C:WINDOWSSYSTEMRASAPI32.DLL 4.10.2222 Dial-Up Networking Dynamic Linked Library
SECUR32.DLL 7f870000 40960 C:WINDOWSSYSTEMSECUR32.DLL 4.10.2222 Microsoft Win32 Security Services
MSVCRT20.DLL 7fc30000 282624 C:WINDOWSSYSTEMMSVCRT20.DLL 2.11.000 Microsoft® C Runtime Library
SVRAPI.DLL 7f950000 32768 C:WINDOWSSYSTEMSVRAPI.DLL 4.10.1998 32-bit common Server API library
MSPWL32.DLL 7fb40000 40960 C:WINDOWSSYSTEMMSPWL32.DLL 4.10.1998 Password list management library
TAPI32.DLL 7f960000 122880 C:WINDOWSSYSTEMTAPI32.DLL 4.10.2222 Microsoft® Windows(TM) Telephony API Client DLL
NETAPI32.DLL 7f990000 20480 C:WINDOWSSYSTEMNETAPI32.DLL 4.10.1998 32-bit network API DLL
NETBIOS.DLL 7f840000 32768 C:WINDOWSSYSTEMNETBIOS.DLL
RSABASE.DLL 7ca00000 110592 C:WINDOWSSYSTEMRSABASE.DLL 5.00.1877.7 Microsoft Base Cryptographic Provider (Export Version)
SOFTPUB.DLL 77ac0000 69632 C:WINDOWSSYSTEMSOFTPUB.DLL 5.131.1877.4 Microsoft Trust Policy Providers
GOOGLETOOLBAR1.DLL 7b0000 753664 C:PROGRAM FILESGOOGLEGOOGLETOOLBAR1.DLL 2, 0, 111, 0 Google IE Client Toolbar
OLEAUT32.DLL 7fe80000 610304 C:WINDOWSSYSTEMOLEAUT32.DLL 2.40.4515
WINMM.DLL bfdf0000 65536 C:WINDOWSSYSTEMWINMM.DLL 4.03.1998 System APIs for Multimedia
WINTRUST.DLL 71410000 57344 C:WINDOWSSYSTEMWINTRUST.DLL 5.131.1877.5 Microsoft Trust Verification APIs
CRYPT32.DLL 22e0000 385024 C:WINDOWSSYSTEMCRYPT32.DLL 5.131.1877.5 Crypto API32
MSOSS.DLL 79e00000 151552 C:WINDOWSSYSTEMMSOSS.DLL 5.131.1877.3 Microsoft Trust ASN APIs
WSOCK32.DLL 75fa0000 40960 C:WINDOWSSYSTEMWSOCK32.DLL 4.10.1998 BSD Socket API for Windows
MSWSOCK.DLL 794d0000 86016 C:WINDOWSSYSTEMMSWSOCK.DLL 4.10.2222 Microsoft WinSock Extension APIs
WS2_32.DLL 76000000 73728 C:WINDOWSSYSTEMWS2_32.DLL 4.10.2222 Windows Socket 2.0 32-Bit DLL
WS2HELP.DLL 75fe0000 24576 C:WINDOWSSYSTEMWS2HELP.DLL 4.10.1998 Windows Socket 2.0 Helper for Windows 98
MSVCRT.DLL 78000000 286720 C:WINDOWSSYSTEMMSVCRT.DLL 6.10.8637.0 Microsoft (R) C Runtime Library
URLMON.DLL 70290000 450560 C:WINDOWSSYSTEMURLMON.DLL 5.00.2919.6303 OLE32 Extensions for Win32
SETUPAPI.DLL 77ea0000 421888 C:WINDOWSSYSTEMSETUPAPI.DLL 5.00.1671.1 Windows NT Setup API
RPCRT4.DLL 7fb90000 335872 C:WINDOWSSYSTEMRPCRT4.DLL 4.71.2900 Remote Procedure Call DLL
MPR.DLL 7fbf0000 57344 C:WINDOWSSYSTEMMPR.DLL 4.10.1998 WIN32 Network Interface DLL
CFGMGR32.DLL 7f810000 45056 C:WINDOWSSYSTEMCFGMGR32.DLL 4.10.1998 Configuration Manager Win32 Interface
WINSPOOL.DRV 7fe40000 36864 C:WINDOWSSYSTEMWINSPOOL.DRV 4.10.1998 Win32 WINSPOOL core component
VERSION.DLL bfe70000 24576 C:WINDOWSSYSTEMVERSION.DLL 4.10.1998 Win32 VERSION core component
COMDLG32.DLL 7fe10000 184320 C:WINDOWSSYSTEMCOMDLG32.DLL 4.72.3510.2300 Common Dialogs DLL
LZ32.DLL bfe60000 24576 C:WINDOWSSYSTEMLZ32.DLL 4.10.1998 Win32 LZ32 core component
NTDLL.DLL bfee0000 20480 C:WINDOWSSYSTEMNTDLL.DLL 4.10.1998 Win32 NTDLL core component
SHFOLDER.DLL 71300000 32768 C:WINDOWSSYSTEMSHFOLDER.DLL 5.50.4027.300 Shell Folder Service
WININET.DLL 70200000 466944 C:WINDOWSSYSTEMWININET.DLL 5.00.2919.6305 Internet Extensions for Win32
BROWSELC.DLL 71730000 45056 C:WINDOWSSYSTEMBROWSELC.DLL 5.00.2919.6304 Shell Browser UI Library
BROWSEUI.DLL 71050000 819200 C:WINDOWSSYSTEMBROWSEUI.DLL 5.00.2919.6304 Shell Browser UI Library
QDCSPI.DLL 10000000 45056 C:WINDOWSSYSTEMQDCSPI.DLL 6.01.0012 Norton QDCSPI Library
OLE32.DLL 7ff20000 790528 C:WINDOWSSYSTEMOLE32.DLL 4.71.2900 Microsoft OLE for Windows and Windows NT
SHDOCVW.DLL 70f30000 1114112 C:WINDOWSSYSTEMSHDOCVW.DLL 5.00.2919.6307 Shell Doc Object and Control Library
SHELL32.DLL 7fcb0000 1400832 C:WINDOWSSYSTEMSHELL32.DLL 4.72.3612.1700 Windows Shell Common Dll
COMCTL32.DLL bfb70000 581632 C:WINDOWSSYSTEMCOMCTL32.DLL 5.81 Common Controls Library
IEXPLORE.EXE 400000 73728 C:PROGRAM FILESINTERNET EXPLORERIEXPLORE.EXE 5.00.2919.6304 Internet Explorer
SHLWAPI.DLL 70bd0000 299008 C:WINDOWSSYSTEMSHLWAPI.DLL 5.00.2919.6304 Shell Light-weight Utility Library
USER32.DLL bff50000 69632 C:WINDOWSSYSTEMUSER32.DLL 4.10.2222 Win32 USER32 core component
GDI32.DLL bff20000 155648 C:WINDOWSSYSTEMGDI32.DLL 4.10.1998 Win32 GDI core component
ADVAPI32.DLL bfe80000 65536 C:WINDOWSSYSTEMADVAPI32.DLL 4.80.1675 Win32 ADVAPI32 core component
KERNEL32.DLL bff70000 471040 C:WINDOWSSYSTEMKERNEL32.DLL 4.10.2222 Win32 Kernel core component


Sorry for posting all this crap but I'm getting frustrated at not being able to shift this bug. The links you've posted Tommo are helpful to an extent but not in telling me specifially what file i need to delete.

[chicane]

Problem solved, I hope. I held F8 on boot and then went into the command prompt and deleted MADOPEW.dll, everything seems to be ok.

Thanks to those who helped.

Al

[TommoFocus]

Chicane,
my usual fault finding technique is to type in the name of the files and see if they show up in virus reports etc, works for me!