PING PA Bear

[siljaline]

The "T3" malware you were inquiring about. I posted a query/thread in the
Spyware Info Forum,
http://www.spywareinfo.com/forums/index.php?s=469fc52db3e2f5997e7a8ca44468f575&act=ST&f=10&t=8149
http://snurl.com/1tfv

HTH


--
siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_

 

[PA Bear]

"Look for a DLL file whose name is four random letters" seems to fit the
bill for the few descriptions of T3 I've seen so far.

Henri?

~PA Bear

 

[Sandi Hardmeier]

Bear,
Andrew Clover from Dox Desk replied to my post, he added this URL:
http://www.doxdesk.com/parasite/ToolbarCC.html

Comment from Andrew, "Not sure where the name "t3" has come from, I don't see
it in the code."

Please tell Andrew that the name T3 comes from a programme called BHO
Captor; at least that is what that programme calls it when detected.

Sandi Hardmeier
Microsoft MVP
www.mvps.org/inetexplorer

 

[PA Bear]

BHO Captor is one of the spyware removal tools touted by Henri Leboeuf, who
started all this.

 

[Sandi - Microsoft MVP]

BHO Captor is one of the spyware removal tools touted by Henri Leboeuf,
who
started all this.

Yep, it just goes to show the dangers of grabbing something off a post made
by an unknown and running with it /