When I click internet explorer to go to the web, it no longer goes to my home page. A error message comes up saying: Cannot find file:///C:/windows/secure.html Make sure path or internet address is correct. I can then get a blank internet explorer page and type in the address and go to my home page. I go click internet options to reset my homepage. The windows/secure.html is set each time for my default homepage. I reset it again to my regular homepage, again, the windows/secure takes over. It is also throwing tons of porn addresses into my favorites file. I have run spybot and adaware. It cleared some things but did not fix this problem. I also downloaded the newest version of McAfee VirusScan. It found several viruses and trojans and cleaned them. However, it did not fix the homepage hijack problem. My McAfee VirusScan is acting up bad too. While I was running the virus scan, the red box kept popping up every 5 seconds saying The file C:\Windows\system32\regsvc32.exe was infected by the StartPage-BD trojan and has been deleted to complete the clean process. I would click the continue what I was doing. A box would pop up saying It is recommended that you run a full scan do you want to do so at this time? I would click the NO because I was already in the process of running a scan. A message popped up in the Virus Scan while it was going with the same trojan. When the scan was over, it said that it was cleaned. This box keeps popping up with the same message. I keep clicking the Continue what I was doing, the box comes up telling me to run a scan which I just did and it took almost an hour to do. I click no since I just did that. The stupid red box pops right back up. It is a persistant little turd. It is the same message in the McAfee pop up each time talking about the windows/system32/regsvc32.exe infected by the StartPage-BD trojan and has been deleted and cleaned. It keeps repeating over and over. I think a firewall came with this McAfee Virus Scan so maybe this won't happen again if I can get this fixed. I am on a cable modem that is always on so I know I was subject for attack. How do I fix this? Thank you in advance. Oh, I also have this stupid window box that comes on the bottom of my screen constantly that says C:\Windows\dlm.html. When I click on it, nothing happens except the box will slide across the bottom and turn blue. It will go to one end and come back each time I click it. I can right click and hit close and it will go away for a few minutes. Then it comes back. My computer is really pissing me off.

As a start you will need to clean your OS from the spyware. Download CWShredder from http://www.spychecker.com/program/cwshredder.html, Spybot from http://www.safer-networking.org/index.php?lang=en&page=download and Adaware from http://www.lavasoftusa.com/. Run them while offline and in SAFE boot mode. Delete the red entries that Spybot displays. Reboot. Prevent further infection of spyware by adjusting the following:- In IE go to Tools, Internet Options, Advanced tab and uncheck Enable Install On Demand for both IE and Other. Then click the Privacy tab, click Advance button. Tick:- Overide automatic cookie handling, Accept First-party Cookies, Block Third-party Cookies, Always allow session cookies. Click Ok, Ok. Finally, download SpywareBlaster and SpywareGuard from http://www.javacoolsoftware.com/spywareblaster.html, install them and your OS will be spyware proof. You can verify this by running either Spybot or Adaware after an internet session. They will come up with a clean bill of health. Of course you need to frequently look for updates for all of the above mentioned software. If you have not got a firewall then download ZoneAlarm from http://www.zonelabs.com/store/content/company/zap_za_grid.jsp Make sure that you set this software up while you are online.

Have a read thru' the various items detailed/linked at: http://www.computing.net/windowsxp/wwwboard/forum/94623.html discusses many of these pests; includes several excellent resource links (post -1) which you may/should visit... http://www.computing.net/windows95/wwwboard/forum/155163.html is less detailed but perhaps browse also...?

Everything is back to normal now except for these stupid little boxes that come onto the bottom of my computer screen. Boxes like when you have more than one browser open. Anyway, these boxes will have stuff like download3.payoutpal.com/download/index.html-Microsoft Internet Explore. That one when it comes up, you can't click on it or anything. It does nothing. It stays at the bottom of my computer until I reboot. It then comes back shortly after I get back on the net. Another box I get says: C:\Windows\dlm.html That one also does nothing when you click it. It will not take you to a webpage. However, I can get rid of that one for a few minutes at a time by right clicking it and clicking close. It comes back a few minutes later though. Another one I get says something about Internet Explorer by Comcast hispeed. I had Comcast at one time but have not had it for the past 7 months. These pop-unders only started yesterday and have gone non stop since. Does anyone know how to stop these little rascals? I have run updated adaware and spybot. I have also installed and run McAfee Virus Scan which helped a ton with all the other stuff that was going on with my computer. It didn't help these rascals though. I have also installed SpywareBlaster to help keep it clean from spyware once I get rid of them all. I also went to Panda and did a online virus scan there. It found one trojan that my McAfee didn't find. It got fixed. Thanks. HR

Trojan Remover may also be useful (it's refererd to in the links I posted earlier) but it does cost $24 or so - after a 30day free trial. There are also various pop-up stopper utils? Also ensure you have firewall running ZoneAlarm being the usual freebie suggested.

Same type of thing is happening to me. I deleted dlm.html in C:/WINDOWS but now windows appear periodically saying that C:/WINDOWS/dlm.html cannot be found. What is it that is always trying to open C:/WINDOWS/dlm.html?

http://www.computing.net/security/wwwboard/forum/9661.html may have possible info/input; KTTD seems to have an earlier verison of cwshredder available that may resolve it all?