I went to a web site that took over my computer. Now when
I boot up the computer, it appears ok until the end. It
says " The program performed an illegal operation and
will be shut down". Details says Explorer caused an
invalid page fault in module Resp.DLL at 018P:6105319.

Any ideas?

Can you boot to Safe Mode? Hold F5 as you boot, or hold CTRL for the
Startup Menu, & select Safe Mode from that. If you can get there,
then...

"START, Run, MSConfig" & turn off the Startup Group, Config.sys &
Autoexec.bat. (Note: when you later turn them back on, all items in them
will get checked. So, note what may be unchecked first.)

Can you boot to Normal Mode now? If so, there is some troubleshooting to
do, using MSConfig...

http://support.microsoft.com/default...b;en-us;281965
How to Troubleshoot Using the Msconfig Utility with Windows 98
(281965) - This article describes how to use the Microsoft System
Configuration (Msconfig) utility to troubleshoot configuration errors in
Windows 98 and Windows 98 Second Edition.

BUT BE CAREFUL-- better not disable System.ini & Win.ini, because that
can be trouble. Well, if you are sure of your Registry backups, actually
those two can be recovered this way...

(a) Boot to DOS. (Hold Ctrl for the Startup Menu, & select "Command
Prompt Only".)
(b) Scanreg /Restore
(c) Ctrl-Alt Del to Windows.

It will offer five dates. Choose the one of the last successful boot, to
start. These backups are done at boot, not at shut down. This should be
safe to do, if you haven't done anything to files in the mean time. This
will not restore files other than those .ini's & the Registry. It only
restores settings.

--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
should things get worse after this,
PCR
pcrrcp@netzero.net
"Paul" <anonymous@discussions.microsoft.com> wrote in message
news:678701c40184$b83294d0$a501280a@phx.gbl...
| I went to a web site that took over my computer. Now when
| I boot up the computer, it appears ok until the end. It
| says " The program performed an illegal operation and
| will be shut down". Details says Explorer caused an
| invalid page fault in module Resp.DLL at 018P:6105319.
|
| Any ideas?

From places I've read, dot net uses that file, IMHO you do not want or need.
Seeing that it appears to be a hijacker that caused the problem, you will need
to do some cleaning.
Due to a new variant of CWS named "CWS.SmartKiller", many may have problems
accessing any spyware related sites if installed. A detection/removal tool
(delcwssk) is the miniremoval_coolwebsearch_smartkiller.exe by PepiMK and is
available at:
http://majorgeeks.com/downloads31.html

Due to many Spyware help sites being under a DDoS attack (Distributed Denial of
Service), they may/may not be accessible. You can download the latest versions
here:
http://majorgeeks.com/downloads31.html

Download/run Cool Web Shredder from:
http://www.merijn.org/

For Info on Cool Web Search Variants:
http://www.merijn.org/cwschronicles.html

Then download/install/run Ad-Aware to detect/rid of any other parasites/spyware
that may be installed. It can be obtained free from:
http://www.lavasoftusa.com/
After installing Ad-Aware, open it and click on the ref update to get the latest
up-to-date ref file, then run Ad-Aware and delete everything it finds.

And/or download/install/run:
Spybot - Search & Destroy:
http://security.kolla.de/index.php?l...&page=download

If you still have problems, download/run HijackThis from:
http://www.merijn.org/
Do not remove anything with it until you get advice on what to remove, HJThis
will list many apps that are needed along with the bad ones. Read the quick
start here on how to create a log file that can be copied/pasted into a forum
that can provide assistance on removal of unwanted pests.
http://mjc1.com/mirror/hjt/#quick


Then post the logs to an appropriate NG here where they specialize in
spyware/hijacker removal:
http://forums.spywareinfo.com/


--
Brian A.

Jack of all trades, Master of none. One can never truly be a master as there is
always more to learn.

"Paul" <anonymous@discussions.microsoft.com> wrote in message
news:678701c40184$b83294d0$a501280a@phx.gbl...

"Paul" <anonymous@discussions.microsoft.com> wrote in message news:<678701c40184$b83294d0$a501280a@phx.gbl>...

Paul:

I had this happen to me when I removed a web page that referred to a
porno site that inserted entries into my favorites list, and hijacked
my homepage. Even if I changed my home page back, on next reboot it
was back to the porno site. Removing this beast took over one day to
find out what happened, but I finally tracked it down.

This dll inserts itself in the RunOnceEx by using rundll32.exe. The
resp.dll itself is stored in the \Windows\System directory. The only
problem is that you can't see the file! Even if you turn on "Show all
files" in the Folder Options, you can't see it.

This is because the dll patches the OS so that it removes the file
from the list for FindNext, thus keeping it out of the directory
list. The dll also patches the program loader so that a call to the
dll is placed in the program. It even prevents regedit from showing
the file! It does some other things as well, like adjusting the
number of days to keep information in IE.

In order to fix the problem: 1) Boot your system into "safe mode".
In "safe mode" the "Run" tags in the registery are not executed. 2)
Now kill the file. 3) Use regedit to find the registery entry and
delete it.

Incidentally, I also found that if IE was upgraded to IE 6, then the
system would never boot if not in safe mode. If that is part of your
problem, then you may want to use Add/Remove to backlevel your IE to
5.5 while in Safe Mode.

HTH

Mike