Why Can't I Get Rid of This?

Chris Schlotzhauer · Post by **Chris Schlotzhauer** » 18 Apr 2004 11:03 am

When I log onto my browser which is set for Yahoo as default, this other browser takes over. It's URL is (DONT OPEN!)***res://mshp.dll/index.html#12372***
When I reset my default back to Yahoo in preferences, and I log back on, this thing takes over. How do I get rid of this?

Steinar Gregertsen · Post by **Steinar Gregertsen** » 18 Apr 2004 11:18 am

Do a manual search (start menu - search - files and folders) for "mshp.dll" on your machine and delete it if you find it (or move it to another folder on your computer if you're worried about deleting it). The "dll" in the URL indicates that you have some sort of spyware or other program on your computer that automatically takes over when you open your browser.
(A 'dll' file is the one that makes a program tick.)

Steinar

------------------
www.gregertsen.com

John Hawkins · Post by **John Hawkins** » 18 Apr 2004 3:12 pm

Chis ,

I have a subscription program by Web Root called "Spy Sweeper" that goes through your entire system including the registry and captures all the Adware, Spy ware ,etc. that tries to tract the activity /s and places you go to while on the internet . I have been happy with the program so far . It has found and made it possible to delete almost 400 ( so far) combinations of Ad-ware ,Spy-ware , and other simular type threats from my system . I have not had it all that long . I run it about twice a week .

I THINK their site allows you to try their program free for 30 days .At least , you will have an opportunity to delete what it finds in your system on the initial free try . This may or may not solve your current problem . However it may be worth a try .

Some others on here who are much more PC knowledgable than I am , may have a better suggestion .

Here is the program's home page if you want to look at it . http://www.webroot.com

Hope this helps !

John[This message was edited by John Hawkins on 18 April 2004 at 09:18 PM.][This message was edited by John Hawkins on 18 April 2004 at 09:35 PM.]

Chris Schlotzhauer · Post by **Chris Schlotzhauer** » 19 Apr 2004 5:19 am

Thanks guys. I have run Spybot, but it didn't get rid of this browser. I'll try tonight when I get home and report back.

CrowBear Schmitt · Post by **CrowBear Schmitt** » 19 Apr 2004 5:37 am

i had the same problem (or similar) on IE
it was a worm called bookmark D that would open up it's own start up page
i scanned for viruses - Norton did'nt find it
Spybot found it but no matter how many times i deleted it - it was still there -
so i looked up the virus definitions over at http://www.symantec.com - found Bookmark D and followed the links (to microsoft) to get rid of it.
it worked and is now gone

Chris Schlotzhauer · Post by **Chris Schlotzhauer** » 19 Apr 2004 6:17 am

CrowBear, you said you "looked up" virus definitions. I went to their site and only saw where to download definitions.

Post by **Brad Bechtel** » 19 Apr 2004 8:15 am

Go here for removal instructions.
I hate this kind of thing more than just about anything.

Chris Schlotzhauer · Post by **Chris Schlotzhauer** » 19 Apr 2004 8:22 am

Awsome Brad. I'll try this tonight. Thanks!

CrowBear Schmitt · Post by **CrowBear Schmitt** » 19 Apr 2004 9:19 am

Chris, this is what i used: http://securityresponse.symantec.com/avcenter/venc/data/trojan.bookmarker.d.html