PING PA Bear

siljaline · Jul 17, 2003

The "T3" malware you were inquiring about. I posted a query/thread in the
Spyware Info Forum,
http://www.spywareinfo.com/forums/index.php?s=469fc52db3e2f5997e7a8ca44468f575&act=ST&f=10&t=8149
http://snurl.com/1tfv

HTH

--
siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_

PA Bear · Jul 17, 2003

"Look for a DLL file whose name is four random letters" seems to fit the
bill for the few descriptions of T3 I've seen so far.

Henri?

~PA Bear

Sandi Hardmeier · Jul 26, 2003

siljaline said:
Bear,
Andrew Clover from Dox Desk replied to my post, he added this URL:
http://www.doxdesk.com/parasite/ToolbarCC.html

Comment from Andrew, "Not sure where the name "t3" has come from, I don't see
it in the code."

Please tell Andrew that the name T3 comes from a programme called BHO
Captor; at least that is what that programme calls it when detected.

Sandi Hardmeier
Microsoft MVP
www.mvps.org/inetexplorer

PA Bear · Jul 26, 2003

BHO Captor is one of the spyware removal tools touted by Henri Leboeuf, who
started all this.

Sandi - Microsoft MVP · Jul 27, 2003

BHO Captor is one of the spyware removal tools touted by Henri Leboeuf,
who
started all this.

Yep, it just goes to show the dangers of grabbing something off a post made
by an unknown and running with it

/

PING PA Bear

siljaline

PA Bear

Sandi Hardmeier

PA Bear

Sandi - Microsoft MVP