Re: unknown dll and exe: ezbewvi.dll, ezbewvi.exe

From: Steve Horsley (steve.horsley1_at_virgin.NO_SPAM.net)
Date: 09/05/03 

Date: Fri, 05 Sep 2003 20:39:49 +0100

On Fri, 05 Sep 2003 01:23:22 -0700, ppunk wrote:

> @sponge
> Thank you for your reply. I did everything what you recommended. I
> checked also the registry. In the section
> HK_LM\Software\Microsoft\Windows\CurrentVersion\Run was a key->value
> ezbewvi->"C:\WINNT\System32\ezbewvi.exe". I tried to remove it but it
> was immediatly restored, like some process is watching the registry.
> SpyBot wrote an entry in the Run-Disabled section for this ezbewvi.
> What is the effect from this action? Does it prevent running the exe
> from the dll later or does it only prevent the process to run at
> system startup? After rebooting, some time later svchost.exe threw an
> exception, DaD in the IE was disabled, several applications could not
> start. I'd like to send someone this exe and dll for checking. Whom?

I happened upon this link earlier today:
http://vil.nai.com/vil/submit-sample.asp

Steve

Relevant Pages

  • Re: SEHException at app startup
    ... > Who entered this in the registry in the first place? ... > should never contain your exe. ... AppVerifier is not installed on this computer. ... >>> Droopy. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: secure32.exe
    ... > kind of search could be used - I tried to search files that had the text ... Exe can register this dll as Winlogon ... or as extension in AppInit_Dlls registry key - this allows dll to ...
    (microsoft.public.security.virus)
  • Re: Using same interfaces for in-proc vs. out-proc
    ... I forgot to mention that when I compile the DLL after removing the TYPELIB ... and REGISTRY entries in the RC file I still get this message: ... for the COM part is in the same project as the rest of the EXE code. ...
    (microsoft.public.vc.atl)
  • Re: Mobile Service & Auto Start
    ... The RegRestoreFile API is only supported by the object store-based registry. ... have never needed to write an app like this and I just figured ... So I have an exe that I start 5 min after I push a button. ...
    (microsoft.public.dotnet.framework.compactframework)
  • Re: Transferring programmes from one partition to another
    ... the same dll location. ... If the exe file is moved, the association is broken and is not ... The dll may look to the registry but since the exe and ... of registry entries involed, you could in theory anyway, update the registry ...
    (microsoft.public.windowsxp.general)
Loading