res:// homepage hack? Random popups from "Only The Best?"

Possible known fixes until it can be addressed. This one is ugly, so your not alone trying to remove it and dont expect it to be easy One easy way is to consider locking your home page with many of the spyware utilities and to purchase a spyware tool that monitors live and can stop this. Good bets are Ad-Aware and Pest Patrol.

Open windows task manager. Cross reference processes with processes in this library http://www.liutilities.com/products/wintaskspro/processlibrary/ make a note of system and program processes and a seperate note for processes that don't show up. For me it was iplw32.exe and appaz32.exe. I typed both of these filenames into google and neither returned results. Next end the processes that returned no results. Then open windows search and search the filnemes on your drive. You should retrieve 2 results for each process (one application and a prefetch) delete this files. Run hijack this and fix any remnants left on the registry containing the (res://***.dll) address. Go to your control panel - Internet options and reset to the start page of your choice hit apply. Now restart your computer. This should work. It has worked for me all evening with no problems.


Open the DLL you get hijacked to in Notepad
Select all content (Ctrl-A) and delete it
Save the file and exit Notepad
Find the file in Explorer, right-click it, select Properties, put a checkmark in 'Read-Only' and click OK.


You may find more info here:
http://forums.spywareinfo.com/index.php?showtopic=7447


NOTE: This thread is for possible fixes. Posting technical questions, stupid hijack this log files, etc., will be considered thread hijacking and deleted. Please search or start a new thread if you need help.

 

Fixed, thanks.