Google Answers Logo
View Question
Q: Highjacking of IE browser ( Answered,   1 Comment )
Subject: Highjacking of IE browser
Category: Computers > Security
Asked by: jeffbl5-ga
List Price: $10.00
Posted: 03 Jul 2004 14:51 PDT
Expires: 02 Aug 2004 14:51 PDT
Question ID: 369325
I want to get rid of res://xmkro.dll/index #26512. I have a highjack
of my IE browser. I have Spybot updated and adware updated. Cw
shredder cost so I don't have it. I spent $30 for adware and it didn't
remove the virus. I keep windows Xp updated and Norton updated. I also
get this "mwsoemon-Word Pad" in a foreign language. I want to remove
it as well. This is very frustrating despite my efforts to prevent
spyware/viruses. Thanks for your help!!
Subject: Re: Highjacking of IE browser
Answered By: aceresearcher-ga on 03 Jul 2004 15:34 PDT
Greetings, Jeff!

Let's see if we can get this vermin taken care of.

CoolWebShredder does not cost money (although there may be some sites
trying to charge people for downloads). You can download it for free
from here (scroll down to find it):

When you start up CoolWebShredder, it should say Version 1.59.1 .

Run it and remove the recommended items.

Then shut down and restart your computer.

Before running AdAware and Spybot, did you make sure to download the
latest updates?

Start up AdAware. In the bottom right-hand corner, it should say
"AdAware 6.0 Personal, Build 6.181". Up above, under "Initialization
Status", it should say "Reference file 01R326 01.07.2004 loaded". If
your settings for either of these do not match, click "Check for
updates now". Once the update has completed, if one or both of these
still doesn't match the settings I listed, you may need to uninstall
AdAware, and then download and install the latest version from
Once that's installed, be sure to click "Check for updates now" to get
the latest reference files.

Once you have the latest Build and Reference file, try running AdAware
again and remove the recommended items.

Then, start up Spybot Search & Destroy. Pull down the "Help" menu and
select "About". You should see
Spybot Search & Destroy 1.3
Latest detection update: 2004-06-23.
If your settings for either of these do not match, click the "Update"
icon menu on the left-hand side of the screen, and then click on
"Search for Updates" near the top of the page.  You'll need to exit
Spybot and restart it to check the "About" information page. If this
doesn't work, you may need to uninstall Spybot, and then download and
install the latest version from

Once you have the latest Version and Detection Update, try running
Spybot again and remove the recommended items.

Each time you run Spybot and/or AdAware, be sure to download the
latest updates first!

Then shut your computer down, restart, and check to see if you're
still having the problem.

If you're still having problems, please post a Clarification here
stating that, and I'll work with you to get the problem resolved.



Request for Answer Clarification by jeffbl5-ga on 03 Jul 2004 19:14 PDT
I did everything you said, to the letter, and I still can't get rid of
: res://xmkro.dll/index #26512. I updated and ran Spybot, Adware and
cwshredder. Every time I double click IE on my dwsktop up comes a
small window about spyware and some sort of search page with a windows
flag in the upper left. I have to close out of that and go to Start
Page Guard, every time to reset my homepage. I've spent hours trying
to fix things to no avail. I'm ready to give up for today. Thanks for
all your help.

Jeff B.

Clarification of Answer by aceresearcher-ga on 03 Jul 2004 20:05 PDT
I can understand your frustration. Sometimes with things like this,
it's best to just walk away for awhile.

Once you're ready to have another go at it, there are more things that we can try.

I know that you said that you keep Windows updated, but just to be
sure that you have installed any new security-related patches that
have been released, check if there are any available by going here:

If it tells you that you need critical updates, please download them
and reboot your computer.

Then, open up your Norton Anti-Virus dialog box and select
"LiveUpdate" in the upper left-hand corner to download any needed
additions to the program and its virus definitions. If NAV wants you
to restart your system, let it do so. Then, from the NAV dialog box,
click "Full System Scan" and "Scan Now".

Then, download and run HijackThis!    

Once the Scan is completed, click "Save log", and copy and paste here
a copy of your HijackThis! scan log.

Hang in there!


Clarification of Answer by aceresearcher-ga on 09 Jul 2004 14:57 PDT

PCHell has some instructions for removal of this which may work for you:

Please let me know whether you still need assistance.

Subject: Re: Highjacking of IE browser
From: tlspiegel-ga on 03 Jul 2004 14:56 PDT
CWShredder direct download:

Important Disclaimer: Answers and comments provided on Google Answers are general information, and are not intended to substitute for informed professional medical, psychiatric, psychological, tax, legal, investment, accounting, or other professional advice. Google does not endorse, and expressly disclaims liability for any product, manufacturer, distributor, service or service provider mentioned or any opinion expressed in answers or comments. Please read carefully the Google Answers Terms of Service.

If you feel that you have found inappropriate content, please let us know by emailing us at with the question ID listed above. Thank you.
Search Google Answers for
Google Answers  

Google Home - Answers FAQ - Terms of Service - Privacy Policy