Parasite: MyPageFinder

This record last updated Tue Sep 20 2005 00:34:15

PLEASE NOTE: Due to the overwhelming extent of this problem and the unbelievable volume of email we have received, we regret that we cannot respond to questions about browser parasites at this time. If you have attempted to contact us about this parasite please accept our apology for not responding. "Thank you's" are always appreciated ;-)

Description

MyPageFinder is a homepage- and search-hijacker implemented as an IE Browser Helper object.

It resets your home page and search settings to point to the server 66.40.21.68, which is mypagefinder.com.

I do not currently have a copy of MyPageFinder to test, so information here is limited.

Variants

MyPageFinder/ML’s filename is ml_32.dll. MyPageFinder/ML1’s filename is ml1_32.dll.

Distribution

Unknown.

What it does

Advertising

No.

Privacy violation

Unknown.

Security issues

None known.

Stability problems

None known.

Removal

Spybot S&D update 2003-04-11 and later can remove MyPageFinder.

Manual removal

Open a DOS command prompt window (from Start->Programs->Accessories) and enter the following commands (ML variant):

cd "%WinDir%\System"
regsvr32 /u ml_32.dll

Or, for the ML1 variant:

cd "%WinDir%\System"
regsvr32 /u ml1_32.dll

Restart the computer and you should be able to delete the file ml_32.dll or ml1_32.dll inside the System folder (which is inside the Windows folder - it’s called ‘System32’ on Windows NT, 2000 and XP, or just ‘System’ on Windows 95, 98 and Me).

Go to Internet Options and reset your home page (General->Home Page) and search settings (Programs->Reset Web Settings).

* Parasite information and detection script by Andrew Clover - www.doxdesk.com, used with permission.

For more information about Scumware, Spyware and Parasites, their sources and their cure, visit our About Parasites page and related Tech Links.

Visit our new services portal at Allen One for a completely new parasite database format, comming November 2005!