Browser Hijack, about:blank Search, sp.html, and friends
Posted by iq454

OKAY guys, I think this is it....for real this time

okay, the new dll found by bho was "javatm.dll", and the new exe fies created were.

javacm.exe
javadp32.exe
javalb.exe
javaqp32.exe
javatn32.exe
javaug32.exe
javaut32.exe
javavd32.exe
javawe32.exe
javaww.exe
javayr.exe

all are 19 kB in size, even all the others with different names to the dll's previous to this new one I got are this size, so we have got the bastards.

You see, it makes exes of the dll, or, the previous dll deleted made these first, then the dll, either way, we gotta delete these.

OH, and if you delete the exe's and not the dll, the dll will make a new set of exe's for itself, incase you delete the dll(sneaky), and if you delete the dll first without deleting the corresponding exe's, then those exe's will make a new dll(sneaky) with a random name, and then that dll will create another set of exe's to match. So you have to delete the dll and the exe's together, otherwise it will just go on and on.

If you have been deleting the dll's and not these exe's, then then you will either have to remember those dll's names you dleleted so we can find them, or just use the 19kB file size to judge, then just see if there's 11 of them, and you need to get all of them together, dll's and exe's.

Hope this helps. I'm in the process now of testing this, I'll post back soon on the results.

PS: This is why BHO doesn't work for some of you, because BHO only picks up one file at a time,(the active one)and not the rest, because the rest are turned off and BHO thinks that their harmless. So again, as soon as you delete the actve one(whatever BHO picks up), it will then turn on the others, and they will start all over again. So again, we need to dlelete them all together.
[Edited by iq454 on 2004-09-08 08:07:12]


Printed from NT Compatible