The Mudcat Café TM
Thread #44075   Message #646607
Posted By: JohnInKansas
10-Feb-02 - 01:50 PM
Thread Name: Tech: Browser home page problem
Subject: RE: BS: Browser home page problem
A little more info:

This virus puts a "shortcut" in your Windows Startup folder, so that it can "reinstall" the homepage everytime you boot Windows. Look for a .dll that doesn't belong there. The name varies, and in addition to those given in the Sophos and Norton sites, you might find "sp.dll" or something else.

Right click on the suspect .dll and check properties to see what file it "points to," and then delete both the shortcut and the "target."

This will probably prevent the virus from "re-executing," but it will have set the unwanted home page in your registry, and to get fully clean you will need to edit the registry as well. If you are not comfortable editing the registry, you can probably just reset your homepage and ignore - at least until you can get some help.

Once you have stopped the shortcut in Startup from resetting, and deleted the "real" .dll that the shortcut points to, you should be able to restore your original homepage.

A caution: if your computer is set up for multiple users, you must repeat the process for each user. This thing can splatter itself all over a machine.

John