A WARNING! mydocs.dll

[Sonny]

There's a LOT more going on with the mydocs.dll than meets the eye. It is
DEFINITELY doing more than just storing data. It's sending data out when you
access the internet! Yep, don't believe me?

I put Zone Alarm Pro, (an excellent firewall), on my computer, and this
firewall checks what's going out as well as what's trying to get in. Well, I
set the internet settings to the highest, or most secure for checking files
in and out. I couldn't believe it! When ever I tried to access the internet
I would get an alarm that said the program I was trying to access the
internet with has been changed, and would I allow the changed program to
access the internet? When I hit the details button, I see that mydocs.dll
had attached itself to ANY program that I was trying to access the internet
with and the alarm logs showed that mydocs.dll was attempting to send data!
NO LIE! I think the reason My Docs is so slow is because it's doing LOTS of
sneaky crap behind the scenes and sending out data to MS or somewhere! Where
else would it be sending data?

Anyway, download a free trial copy of Zone Labs, Zone Alarm Pro firewall and
check it out for yourself. In fact, I bought a MS internet keyboard and
laser mouse and had to disable the system hooks because they BOTH were
sending data to a central database, I know that because the database has an
IP address!!!! Once again, NO LIE! Get the Zone Alarm firewall and check it
out for yourself!

I'd love to find someone who has addressed this problem with Microsoft
software. What programs within the operating systems are reporting back? It
can't be denied, it IS happening, and the reason it's being discovered is
because there was never a firewall good enough or complete enough to check
what's going out before. This firewall was designed to stop things like a
Trojan horse from communicating, thereby stopping the virus. It just so
happens that it's catching Microsoft too!

This could be another HUGE lawsuit against MS. I'm sure they don't want this
to be known, but beware people, big brother IS watching you! THAT is the
main reason the mydocs.dll is so twitchy, slow and has it's own
architecture, it's doing a LOT more than just sitting there! I understand
the "My Favorites" folder information is included in the data being sent by
mydocs.dll too. Does anyone know who has been working on this problem with
MS? Somebody should! Good luck!

Sonny

 

[Bill Moyer]

x-no-archive: yes

There's a LOT more going on with the mydocs.dll than meets the eye.
It is DEFINITELY doing more than just storing data. It's sending data
out when you access the internet! Yep, don't believe me?

I put Zone Alarm Pro, (an excellent firewall), on my computer, and
this firewall checks what's going out as well as what's trying to get
in. Well, I set the internet settings to the highest, or most secure
for checking files in and out. I couldn't believe it! When ever I
tried to access the internet I would get an alarm that said the
program I was trying to access the internet with has been changed,
and would I allow the changed program to access the internet? When I
hit the details button, I see that mydocs.dll had attached itself to
ANY program that I was trying to access the internet with and the
alarm logs showed that mydocs.dll was attempting to send data! NO
LIE! I think the reason My Docs is so slow is because it's doing LOTS
of sneaky crap behind the scenes and sending out data to MS or
somewhere! Where else would it be sending data?

This is what happens when you mix personal firewall software with
cluelessness and paranoia. Mydocs.dll is 86 KB in size; how much
nefarious activity can you pack in that? And if you are paranoid enough
to argue that other Windows XP components work behind the scenes, and
that mydocs.dll is just the messenger for all that activity, then why
use the product at all?

Have you used a packet sniffer? I didn't think so.

The explanator text provided by Zone Labs regarding mydocs.dll is that
it is "A component that has at some time BEEN USED BY a program that
attempted to send or receive an IP packet over the Internet" (emphasis
mine). What this means is *not* that mydocs.dll did any data transfer
itself, but rather that a program that *did* transfer data also happened
to use mydocs.dll (and *not* necessarily for any purpose having to do
with that data transfer). There is a big difference.

Explorer and Internet Explorer use the mydocs.dll hook. So there is
your explanation.

 

[Sonny]

I don't get it Nick? That's a MS answer, but I want to know why mydocs.dll
attaches itself to programs accessing the 'net. I got no help from MS, other
than the link you just gave. Thanks for the reply though.

Sonny

Helping Protect Privacy at Microsoft
http://www.microsoft.com/security/articles/safe_harbor.asp


--
Nicholas

----------------------------------------------------------------------------
-------------------


| There's a LOT more going on with the mydocs.dll than meets the eye. It is
| DEFINITELY doing more than just storing data. It's sending data out when
you
| access the internet! Yep, don't believe me?
|
| I put Zone Alarm Pro, (an excellent firewall), on my computer, and this
| firewall checks what's going out as well as what's trying to get in. Well,
I
| set the internet settings to the highest, or most secure for checking
files
| in and out. I couldn't believe it! When ever I tried to access the
internet
| I would get an alarm that said the program I was trying to access the
| internet with has been changed, and would I allow the changed program to
| access the internet? When I hit the details button, I see that mydocs.dll
| had attached itself to ANY program that I was trying to access the
internet
| with and the alarm logs showed that mydocs.dll was attempting to send
data!
| NO LIE! I think the reason My Docs is so slow is because it's doing LOTS
of
| sneaky crap behind the scenes and sending out data to MS or somewhere!
Where
| else would it be sending data?
|
| Anyway, download a free trial copy of Zone Labs, Zone Alarm Pro firewall
and
| check it out for yourself. In fact, I bought a MS internet keyboard and
| laser mouse and had to disable the system hooks because they BOTH were
| sending data to a central database, I know that because the database has
an
| IP address!!!! Once again, NO LIE! Get the Zone Alarm firewall and check
it
| out for yourself!
|
| I'd love to find someone who has addressed this problem with Microsoft
| software. What programs within the operating systems are reporting back?
It
| can't be denied, it IS happening, and the reason it's being discovered is
| because there was never a firewall good enough or complete enough to check
| what's going out before. This firewall was designed to stop things like a
| Trojan horse from communicating, thereby stopping the virus. It just so
| happens that it's catching Microsoft too!
|
| This could be another HUGE lawsuit against MS. I'm sure they don't want
this
| to be known, but beware people, big brother IS watching you! THAT is the
| main reason the mydocs.dll is so twitchy, slow and has it's own
| architecture, it's doing a LOT more than just sitting there! I understand
| the "My Favorites" folder information is included in the data being sent
by
| mydocs.dll too. Does anyone know who has been working on this problem with
| MS? Somebody should! Good luck!
|
| Sonny
|
|

 

[NoNoBadDog!]

I have used ZoneAlarm Pro for over 2 years now, have it installed on 4
computers in my home that are networked to share a broadband connection, and
I have never experienced "mydocs.dll" attempting to send any packets on the
internet. I suggest you have a trojan or a worm. The activity you describe
is definitely not normal in any sense.

You need to clean your own house before calling anyone else's home dirty.

You know, there are drugs that help with paranoia. Perhaps a visit to your
local psychiatrist will help.


Bobby

 

[Sonny]

Yeah, right, thanks for the help "nonobaddog"..................

Sonny'

 

[Barry Ford]

While I agree with the premise of your reply, you made a
significant error. You wrote, "Mydocs.dll is 86 KB in
size; how much nefarious activity can you pack in that?"
Many harmful viruses are only 64KB in size. Most Trojans
are larger, but even small destructive programs can have a
big impact.

 

[Bill Moyer]

Of course I'm aware of malware size efficency (I maintain copies of live
trojans for my own testing). But when is the last time you saw
*Microsoft* pack powerful functionality in a sub-100-KB executable
package?

Case closed.

 

[Scott]

Have you tried running an ad detection program like adaware or spybot
to see if you have a program that is trying to send info from your
com?

 

[Sonny]

Yes I have AdAware and Spyblocker Scott, port blockers, etc.. That was the
first thing that I thought about though, and some of the new stuff that's
coming out, (virus wise), is really something. I do have some help now from
a few great people, so I'm gonna go through my system at least one more
time, registry and all. If I find anything I will be HAPPY to post the
results, I don't want to point any fingers at MS unfairly, but I got no
friggin help from them, I just assumed that they didn't care or didn't want
anyone asking about it. Thanks for the reply Scott.

Sonny

 

[Barry R. Ford]

Ouch.  That is way too true to be funny.  Microsoft + efficiency = meaningless.

Bill Moyer wrote:


Of course I'm aware of malware size efficency (I maintain copies of live trojans for my own testing). But when is the last time you saw *Microsoft* pack powerful functionality in a sub-100-KB executable package? Case closed. Barry Ford wrote:



While I agree with the premise of your reply, you made a significant error. You wrote, "Mydocs.dll is 86 KB in size; how much nefarious activity can you pack in that?" Many harmful viruses are only 64KB in size. Most Trojans are larger, but even small destructive programs can have a big impact.







-----Original Message----- Sonny wrote:



There's a LOT more going on with the mydocs.dll than meets the eye. It is DEFINITELY doing more than just storing data. It's sending data out when you access the internet! Yep, don't believe me? I put Zone Alarm Pro, (an excellent firewall), on my computer, and this firewall checks what's going out as well as what's trying to get in. Well, I set the internet settings to the highest, or most secure for checking files in and out. I couldn't believe it! When ever I tried to access the internet I would get an alarm that said the program I was trying to access the internet with has been changed, and would I allow the changed program to access the internet? When I hit the details button, I see that mydocs.dll had attached itself to ANY program that I was trying to access the internet with and the alarm logs showed that mydocs.dll was attempting to send data! NO LIE! I think the reason My Docs is so slow is because it's doing LOTS of sneaky crap behind the scenes and sending out data to MS or somewhere! Where else would it be sending data?



This is what happens when you mix personal firewall software with cluelessness and paranoia. Mydocs.dll is 86 KB in size; how much nefarious activity can you pack in that? And if you are paranoid enough to argue that other Windows XP components work behind the scenes, and that mydocs.dll is just the messenger for all that activity, then why use the product at all? Have you used a packet sniffer? I didn't think so. The explanator text provided by Zone Labs regarding mydocs.dll is that it is "A component that has at some time BEEN USED BY a program that attempted to send or receive an IP packet over the Internet" (emphasis mine). What this means is *not* that mydocs.dll did any data transfer itself, but rather that a program that *did* transfer data also happened to use mydocs.dll (and *not* necessarily for any purpose having to do with that data transfer). There is a big difference. Explorer and Internet Explorer use the mydocs.dll hook. So there is your explanation.

 

[me]

x-no-archive: yes


This is what happens when you mix personal firewall software with
cluelessness and paranoia. Mydocs.dll is 86 KB in size; how much
nefarious activity can you pack in that? And if you are paranoid enough
to argue that other Windows XP components work behind the scenes, and
that mydocs.dll is just the messenger for all that activity, then why
use the product at all?

Have you used a packet sniffer? I didn't think so.

The explanator text provided by Zone Labs regarding mydocs.dll is that
it is "A component that has at some time BEEN USED BY a program that
attempted to send or receive an IP packet over the Internet" (emphasis
mine). What this means is *not* that mydocs.dll did any data transfer
itself, but rather that a program that *did* transfer data also happened
to use mydocs.dll (and *not* necessarily for any purpose having to do
with that data transfer). There is a big difference.

Explorer and Internet Explorer use the mydocs.dll hook. So there is
your explanation.

Well it may or may not be dangerous but your comment about how much can be
packed into a 86kb file stinks. There are many small files that are
viruses, trojans, and worms that do pack a punch!

 

[George \(Bindar Dundat\)]

Sonny, Sonny, Sonny, what are we going to do with you? It seems that you can't
even decide what OS you are using since you have posted "The Gospel According To
Sonny" in Win 98 General, Win ME general and now here you are in Win XP General.
In all 3 groups you have been given excellent explanations and in some cases you
were given a couple of items to check just to be sure that there was nothing
malicious happening. Do you listen? Apparently not, because after all that here
you are still insisting that a Microsoft file is up to no good. There is none
so blind as he who does not want to see.

--
George (Bindar Dundat)
This information is provided "AS IS"
It may even be wrong!
http://www.microsoft.com/security/articles/spam.asp
| Yes I have AdAware and Spyblocker Scott, port blockers, etc.. That was the
| first thing that I thought about though, and some of the new stuff that's
| coming out, (virus wise), is really something. I do have some help now from
| a few great people, so I'm gonna go through my system at least one more
| time, registry and all. If I find anything I will be HAPPY to post the
| results, I don't want to point any fingers at MS unfairly, but I got no
| friggin help from them, I just assumed that they didn't care or didn't want
| anyone asking about it. Thanks for the reply Scott.
|
| Sonny
|
| | > Have you tried running an ad detection program like adaware or spybot
| > to see if you have a program that is trying to send info from your
| > com?
| >
| > >There's a LOT more going on with the mydocs.dll than meets the eye. It is
| > >DEFINITELY doing more than just storing data. It's sending data out when
| you
| > >access the internet! Yep, don't believe me?
| > >
| > >I put Zone Alarm Pro, (an excellent firewall), on my computer, and this
| > >firewall checks what's going out as well as what's trying to get in.
| Well, I
| > >set the internet settings to the highest, or most secure for checking
| files
| > >in and out. I couldn't believe it! When ever I tried to access the
| internet
| > >I would get an alarm that said the program I was trying to access the
| > >internet with has been changed, and would I allow the changed program to
| > >access the internet? When I hit the details button, I see that mydocs.dll
| > >had attached itself to ANY program that I was trying to access the
| internet
| > >with and the alarm logs showed that mydocs.dll was attempting to send
| data!
| > >NO LIE! I think the reason My Docs is so slow is because it's doing LOTS
| of
| > >sneaky crap behind the scenes and sending out data to MS or somewhere!
| Where
| > >else would it be sending data?
| > >
| > >Anyway, download a free trial copy of Zone Labs, Zone Alarm Pro firewall
| and
| > >check it out for yourself. In fact, I bought a MS internet keyboard and
| > >laser mouse and had to disable the system hooks because they BOTH were
| > >sending data to a central database, I know that because the database has
| an
| > >IP address!!!! Once again, NO LIE! Get the Zone Alarm firewall and check
| it
| > >out for yourself!
| > >
| > >I'd love to find someone who has addressed this problem with Microsoft
| > >software. What programs within the operating systems are reporting back?
| It
| > >can't be denied, it IS happening, and the reason it's being discovered is
| > >because there was never a firewall good enough or complete enough to
| check
| > >what's going out before. This firewall was designed to stop things like a
| > >Trojan horse from communicating, thereby stopping the virus. It just so
| > >happens that it's catching Microsoft too!
| > >
| > >This could be another HUGE lawsuit against MS. I'm sure they don't want
| this
| > >to be known, but beware people, big brother IS watching you! THAT is the
| > >main reason the mydocs.dll is so twitchy, slow and has it's own
| > >architecture, it's doing a LOT more than just sitting there! I understand
| > >the "My Favorites" folder information is included in the data being sent
| by
| > >mydocs.dll too. Does anyone know who has been working on this problem
| with
| > >MS? Somebody should! Good luck!
| > >
| > >Sonny
| > >
| >
|
|

 

[Sonny]

<LMAO>! George, George, George, you must not be reading what my replies have
been. Now go back and look again......... I will take ANY help and
suggestions, even if I'm shown to be wrong, (which BTW is not an uncommon
occurrence! <G>) Thanks for the reply, I appreciate it.

Sonny