I inserted the wrong URL. It should have been:
http://www.kephyr.com/spywarescanner/library/browseraid.rundll/index.phtml
Deanna
dberman@4dv.net
----- Original Message -----
From: "Deanna Berman" <dberman@4dv.net>
To: "Lawrence Silberstein" <montagefilm@mail.com>; <thinkpad@stderr.org>
Sent: Thursday, March 18, 2004 19:16 PM
Subject: Re: Re: [Thinkpad] Re: A21e abrupt 20% increase in "System Files"
> I can't shake the feeling that you've inadvertently installed a malicious program. I'll probably get a laugh for this, because I
> know nothing about programming, but what has happened to all those files sounds like my admittedly-fuzzy concept of what
> "rundll.exe" and "rundll32.exe" do -- calling a fragment "_.dll" and causing it to run a particular process. But I picture them as
> running the activity, then letting go of the dll when no longer needed. But your post made me wonder if rundll programs could be
> exploited to call up and command a huge cast of dlls even when they're not needed.
>
> So I googled the idea and came upon this page describing a malicious adware program called "BrowserAid.Rundll", a variation or
part
> of BrowserAid, a collection of files that do things like putting unwanted toolbars on your Internet Explorer interface,
redirecting
> your browser to an unintended destination, etc.
> http://www.kephyr.com/spywarescanner/library/browseraid/index.phtml.
>
> I did not read enough of the page -- nor do I know enough about your files -- to say whether this is your problem. But perhaps it
> would be worth your reading to see if you can find any of its characteristics on your system. And even if this particular nasty
> program isn't the cause, it seems to me that it would have to be a similarly-crafted plot
>
> Deanna
> dberman@4dv.net
> .
>
>
> > So: Any other ideas?
> >
> > Hopefully,
> >
> > Larry
> >
>
_______________________________________________
Thinkpad mailing list
Thinkpad@stderr.org
http://stderr.org/cgi-bin/mailman/listinfo/thinkpad
Received on Thu Mar 18 21:26:29 2004
This archive was generated by hypermail 2.1.8 : Fri May 26 2006 - 16:02:32 EDT