Computing.Net > Forums > Security and Virus > C:\WINDOWS\System32\IEsp.mht HELP!

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

C:\WINDOWS\System32\IEsp.mht HELP!

Reply to Message Icon

Name: tay_highfield
Date: June 29, 2004 at 16:50:01 Pacific
OS: Windows XP Home, SP1
CPU/Ram: Celeron 2.8, 512RAM
Comment:

Hello People,

Am having a bit of a nightmare.

I run Ad-Aware and SpyBot on a regular basis, both have been updated to the latest version and all they have found is cleared or fixed. Windows update also shows no critical updates.

However one problem is re-occuring. The homepage is always set to:

C:\WINDOWS\System32\IEsp.mht

I delete the file or change it's name but next time starting Internet Explorer it's back.

Could someone please help?
Thanks in advance for any information or advise.



Sponsored Link
Ads by Google

Response Number 1
Name: JOE
Date: June 30, 2004 at 22:41:46 Pacific
Reply:


1. Shutdown Internet-Explorer, go to your Taskmanager and kill all processes named IEXPLORE.exe

2. Delete this Files:
C:\WINDOWS\system32\IEsp.mht
C:\WINDOWS\system32\msadocm32.dll
C:\WINDOWS\system32\sqlpool.dll

3. Change the Following Registry-Key to "about:blank" (without quotes)
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page

4. Run regedit.exe and delete the following Registry Keys,or Run Hijackthis and Scan and fix ONLY these entries if they exist:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0B519E07-7824-4adc-8890-93D5EABBF285}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0B519E07-7824-4adc-8890-93D5EABBF285}\VersionIndependentProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0B519E07-7824-4adc-8890-93D5EABBF285}\ProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0B519E07-7824-4adc-8890-93D5EABBF285}\Programmable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0B519E07-7824-4adc-8890-93D5EABBF285}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0B519E07-7824-4adc-8890-93D5EABBF285}
or execute
reg.exe delete HKLM\SOFTWARE\Classes\CLSID\{0B519E07-7824-4adc-8890-93D5EABBF285}

5. Delete the Value {0B519E07-7824-4adc-8890-93D5EABBF285} from HKEY_CLASSES_ROOT\ADODB.Comand\CLSID\

I recommend using an alternative web browser such as Mozilla firefox.There are more security issues with IE then with MFF.


0

Response Number 2
Name: tay_highfield
Date: July 1, 2004 at 05:15:18 Pacific
Reply:

Cheers Joe,

All sorted now. Definietly going to switch browsers. IE is just too vunerable!


0

Response Number 3
Name: JOE
Date: July 1, 2004 at 12:51:30 Pacific
Reply:

Good to hear everything is clear.



0

Response Number 4
Name: MikeJ
Date: July 1, 2004 at 22:49:45 Pacific
Reply:

Your instructions worked great, but now I can't stop my home page from being set to "about:blank". Any more help would be greatly appreciated.


0

Response Number 5
Name: JOE
Date: July 2, 2004 at 14:20:43 Pacific
Reply:

Your homepage is set at aboutblank.Thats why its directing you to it.To change this if your using IE.First open your IE browser and at the top select TOOLS,then select INTERNET OPTIONS. Now were it says HOMEPAGE type in the homepage that you want for example: www.msn.com,then select APPLY,then OK.


0

Related Posts

See More



Response Number 6
Name: silvermart
Date: July 5, 2004 at 14:50:16 Pacific
Reply:

This string is a god-send -- thanks. Sorry it won't get the rest of the job done. I am also plagued with morphing files that change without action to files with future dates and a bug that causes Ad-Aware/Ad-Watch to consume more than 90% of my cycles. Ad-Watch and others also can't seem to shut down IE which shows at least 4 open porn processes behind anything that is running. Kill them and they regenerate at different web addresses. Sadly the infidels are building faster than the defenders

Thanks for this bit of help


0

Response Number 7
Name: BenBluestack
Date: July 13, 2004 at 10:42:10 Pacific
Reply:

Perhaps you guys could add a link to the page where you get the description?!

--> http://www.bluestack.org/IEsp.Mht

Thx,
Ben Bluestack



0

Sponsored Link
Ads by Google
Reply to Message Icon

Wierd Virus Problem with an IE6.0 tro...



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: C:\WINDOWS\System32\IEsp.mht HELP!

C:\WINDOWS\System32 popup on boot www.computing.net/answers/security/cwindowssystem32-popup-on-boot/8887.html

Error Message - c:\WINDOWS\system32 www.computing.net/answers/security/error-message-cwindowssystem32/22669.html

Highjacked home page''I Can Find It www.computing.net/answers/security/highjacked-home-pagei-can-find-it/12680.html