Spyware in HP printer driver?

Hi all,

just run a scan with the freshly installed Anti Spyware. It found file "atl.dll" in two directories containing printer driver files
for the HP Color LaserJet 3700. This file was probably produced with MS Visual Studio.

Signature says it contains a browser hijacker by PeopleOnPage.

Seems strange to me that a company like HP should use their drivers to spread Spyware... or is this common use?

Greetings
Rolf

Rolf Molini wrote:

> Hi all,
>
> just run a scan with the freshly installed Anti Spyware. It found file "atl.dll" in two directories containing printer driver files
> for the HP Color LaserJet 3700. This file was probably produced with MS Visual Studio.
>
> Signature says it contains a browser hijacker by PeopleOnPage.
>
> Seems strange to me that a company like HP should use their drivers to spread Spyware... or is this common use?
>
> Greetings
> Rolf
>
>
Rolf,

That is probably because toolband_atl.dll, TOOLBA~*.DLL are associated
with Searchportal.info - CoolWebSearch parasite variant,
http://www.spywareinfo.com/~merijn/cwschronicles.html
The CLSID of the spyware is {815A82AE-CDEF-11D8-BA48-A6D245798277}.

If the atl.dll of HP is different, suggest you go to Tools, Suspected
Spyware Report, and send the info to MS.

Steve Wechsler (akaMowGreen)
MVP Windows Server
AumHa VSOP

I've seen this one first hand myself, and I agree with Steve Wechsler's
assessment and suggestion.

You've posted this in the right place--Microsoft is reading these posts and
the product will be improved by your feedback.

"Rolf Molini" <molini@web.de> wrote in message
news:%230tvR4x9EHA.1660@CPMSFTNGSA04.privatenews.microsoft.com...
> Hi all,
>
> just run a scan with the freshly installed Anti Spyware. It found file
> "atl.dll" in two directories containing printer driver files for the HP
> Color LaserJet 3700. This file was probably produced with MS Visual
> Studio.
>
> Signature says it contains a browser hijacker by PeopleOnPage.
>
> Seems strange to me that a company like HP should use their drivers to
> spread Spyware... or is this common use?
>
> Greetings
> Rolf
>

Steve, Bill

thanks for the advice.

I tried to send a report to MS but first the XML-file could not be interpreted in IE6 and second the report was not transmitted due
to network problems (which do not exist).

Anyhow, if MS reads here that should suffice.

Greetings
Rolf

I believe they'll see the report here.

The issue with report submission appears to be a transient one--probably
load at the server end. I've seen it come and go--repeated tries should
succeed.

"Rolf Molini" <molini@web.de> wrote in message
news:OMeYu489EHA.1600@cpmsftngsa05.privatenews.microsoft.com...
> Steve, Bill
>
> thanks for the advice.
>
> I tried to send a report to MS but first the XML-file could not be
> interpreted in IE6 and second the report was not transmitted due to
> network problems (which do not exist).
>
> Anyhow, if MS reads here that should suffice.
>
> Greetings
> Rolf
>
>

Yes many Businesses will try and attached spyware to any
drivers they have to send advertisements it's sad and it
happeneds.

This is why microsoft came out with this AntiSpyware
program for people who don't want the spyware on there
computer.

>-----Original Message-----
>Hi all,
>
>just run a scan with the freshly installed Anti Spyware.
It found file "atl.dll" in two directories containing
printer driver files
>for the HP Color LaserJet 3700. This file was probably
produced with MS Visual Studio.
>
>Signature says it contains a browser hijacker by
PeopleOnPage.
>
>Seems strange to me that a company like HP should use
their drivers to spread Spyware... or is this common use?
>
>Greetings
>Rolf
>
>
>.
>

"Edward" <managinglife04@yahoo.com> wrote in message
news:0b6e01c4f8ac$0b49dd30$a601280a@phx.gbl...
> Yes many Businesses will try and attached spyware to any
> drivers they have to send advertisements it's sad and it
> happeneds.

That's it--I'm giving up on computers and the Internet and retiring to a
cave. This is all I need--my printer spitting out advertisemnents--in full
color yet!