It would help a lot if you mentioned which version of Windows that you
are running. My guess is that you are running a 95-based version of
Windows since the %windir% path you mention is C:\Windows. So, just
boot to a DOS prompt (i.e., do NOT boot into Windows GUI) and delete or
rename the file manually. You might also want to wander through the
registry looking for any instance of "lsp.dll" to see if anything lists
it as a server process. HOWEVER, this may be a critical file as noted
below.

Have you tried any Google searches on "lsp.dll"? Bet not. One article
has a link to http://www.cexx.org/lspfix.htm which claims LSP.dll is
part of Winsock. In 95-based Windows, you can uninstall the TCP
protocol so maybe uninstalling and reinstalling might provide the same
fix without having to rely on an unknown author telling you to do some
critical surgery in your OS. However,
http://www.doxdesk.com/parasite/ShopAtHomeSelect.html also mentions this
other site.

I'm wondering if SpyBot's Immunize BHO (browser helper object) that
installs into IE might not help protect you later when you go hunting
around unknown web sites, especially when shopping or downloading "free"
software (which, as you found out, actually does have a price tag).

--
__________________________________________________ __________
** Share with others. Post replies in the newsgroup.
** If present, remove all "-NIX" from my email address.
__________________________________________________ __________


"David Emerling" <demerlin(REMOVE_THIS)@midsouth.rr.com> wrote in
message news:JLHeb.1162$oC5.427@clmboh1-nws5.columbus.rr.com...
> Everytime I run SpyBot it finds:
>
> ShopAtHome: Library
> c:\windows\system32\lsp.dll
>
> But it doesn't deleting, instead, asking if it can run SpyBot upon the

next
> boot up.
>
> When I reboot and SpyBot runs, it finds the same file and *still*

can't
> delete it.
>
> When I try to delete it manually through Windows Explorer, it says

"access
> denied."
>
> The file is 40KB and is dated 5/6/2003
>
> How do I get rid of this thing? What the heck is it? And what is it

doing
> to my system?
>
> --
> David Emerling - Memphis, TN
> demerlin(REMOVE_THIS)@midsouth.rr.com
> If you want to email me - edit the above email address appropriately.
>
>
>