Is about:blank Loading Spyware?

From: Dan McKeon (dmckeon_at_ameritas.com)
Date: 07/22/04

  • Next message: Rob Slade, doting grandpa of Ryan and Trevor: "REVIEW: "Defend I.T.", Ajay Gupta/Scott Laliberte" 
    Date: 22 Jul 2004 07:50:33 -0700

    I have been having a problem on Windows XP using Internet Explorer 6.0
    where my home page keeps getting reset to about:blank, but it loads a
    search engine called "Search for.." When I view the source, it is
    redirecting to a hex string that I translated to a dll on
    c:\windows\system32. I scanned the registry and removed the entries
    for that dll (there were 2 in HKEY_CLASSES_ROOT). I then booted to a
    DOS window to delete the dll as it was being called by explorer.dll!

    Then, after a few hours, the problem reappears with a different dll
    name. The name seems to be random, but some examples are:

    c:\windows\system32\jjbejd.dll
    c:\windows\system32\jigkoe.dll

    I ran both Spybot - Search and Destroy and Ad-Aware. They found and
    removed spyware, but it keeps coming back. I am running a virus scan
    now (Norton), and so far it hasn't found anything.

    Does anybody know what's going on? Is there a way to clear this
    problem up? Am I or is my computer at serious risk as a result of
    spyware?

    Any help you can provide will be greatly appreciated.

    TIA,
    Dan

  • Next message: Rob Slade, doting grandpa of Ryan and Trevor: "REVIEW: "Defend I.T.", Ajay Gupta/Scott Laliberte"

    Relevant Pages

    • Re: .Net packaging/wrapper application?
      ... it just didn't work well in reality due to DLL ... Windows works is to look in the executable's directory for a needed DLL ... the way apps used to work when they developed Windows. ... Looks to me like Jim is looking for the .NET equivalent of compiling ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: Unnown process... 5eplorer.exe
      ... do not remove the cause (a "super"-hidden .dll program) but only remove ... symptom files and registry settings. ... It has all permissions but 'copy' denied to everyone, ... then by using the Windows XP Recovery Console. ...
      (microsoft.public.win2000.general)
    • Re: WinSxS, functional under 2k ?
      ... The newSide-by-Side Assembly technology was introduced with Windows XP to help reduce or eliminate DLL Hell. ... If you recall earlier Windows versions, like Windows 95, when you installed an application you were warned if the installer tried to replace a DLL from the system folder with an older version and you were asked if you wanted to accept the change. ... Until Windows XP it wasn't so easy to use different versions of shared system DLLs, that is what the new Side-by-Side assemblies attempts to resolve. ...
      (microsoft.public.win2000.general)
    • Re: Determine name and path of dropped object?
      ... MDE I would really suggest the use of external DLL to hold the subclassing ... windows after loading the Microsoft Office Visual Basic Editor, ... Public Declare Sub DragAcceptFiles Lib "shell32.dll" _ ...
      (microsoft.public.access.modulesdaovba)
    • Re: .Net packaging/wrapper application?
      ... the simple answer to DLL Hell for Visual Basic apps was simply to place a copy of the needed DLLs in the same directory as your executable. ... The way Windows works is to look in the executable's directory for a needed DLL BEFORE using the registry to find one EVEN IF THE REFERENCED DLL IS REGISTERED ON THE PC RUNNING THE APPLICATION THAT NEED IT. ... Perhaps I'm getting old and but what really bothers me is nobody seems to notice this--maybe the 80s was before they got into programming. ... Looks to me like Jim is looking for the .NET equivalent of compiling with static libraries to produce a single executable. ...
      (microsoft.public.dotnet.framework.aspnet)