se.dll spyware

[Brad Smallwood]

Assume people know about this already but it degrades a
system quickly with some sort of interval popup and
keyboard monitoring (would not let me visit Microsoft
among other sites, presumably so I couldn't figure out how
to fix).

has two .dll files one is called se.dll the other is
randomly generated I believe and loaded in the windows
directory. Both are locked so can only delete thru safe
mode/dos. You need to delete both files to stop it from
reappearing. I used HijackThis to identify the other .dll
(in my case called hnmma.dll)

 

[Ron Chamberlin]

Hi Brad,
There's some info on that dll here:
http://www.google.com/search?hl=en&q=se.dll&btnG=Google+Search

Ron Chamberlin
MS-MVP

 

[Bill Sanderson]

I got what look to be pretty useful hits with this search:

trojan.startpage symantec

This one has letter variants. Gonna take manual effort.