What is -> LsOUTLOOKFiles>ToT]jI{jf(=1&L[-81-]

  • Thread starter Thread starter Chuck
  • Start date Start date
C

Chuck

WIN98SE System
===============

Turned on my computer and I heard it beep a few times, something I've never
heard it do before and I saw a very odd file pop up as it booted. I ran all
my virus software finding nothing, but found this very odd line in my
AUTOEXEC.BAT.

LsOUTLOOKFiles>ToT]jI{jf(=1&L[-81-] ÿÿÿÿ 7
rtfhtml.dll4FC!!gxsf(Ng]qF`H{LsOUTLOOKFiles>ToT]jI{jf(=1&L[-81-]

Here is how it was placed.

SET BLASTER=A220 I7 D1 H7 P330 T6
SET SBPCI=C:\AUDIOPCI
LsOUTLOOKFiles>ToT]jI{jf(=1&L[-81-] ÿÿÿÿ 7
rtfhtml.dll4FC!!gxsf(Ng]qF`H{LsOUTLOOKFiles>ToT]jI{jf(=1&L[-81-]

Is this a hijacker or trojan or something else? I removed it, but would
like to know how it got there and what it might be.

Thank you
Chuck
 
don't know what it is either, but don't look good, make
sure its gone, maybe a trojan, sometimes you can get them
just by going to a web site, kinda drive by.
spywareblaster might help keep some stuff out.
 
Yeah this is something I've never seen before either as well. My wife was
on my computer surfing the night before, and I have it as secure as I know
to make it, and since I see html in that line I agree that it looks like
something from a web page that was trying to get, change, copy or do
something with my Outlook files. Checked all the sources I could find for
anything that would do something like that, and nothing really matches.
Went through all my INI files and cookies for anything like it, and have
been searching my registry for the like as well. Have ran 4 updated virus
checkers, and spyware detectors, and everything else I could think of, and
nothing has been found. After many re-boots it hasn't come back, and for
the moment this one has me scratching my head. Pretty scary when you've
done all that you can and something still managed to get in and do something
as big as change your autoexec.bat. I will go ahead and set the attribute
to read only for now, and keep my eye on my system.

I just hope that there is a special place set aside in hell that is hotter
and more miserable than all the other areas just for those that write this
stuff.


don't know what it is either, but don't look good, make
sure its gone, maybe a trojan, sometimes you can get them
just by going to a web site, kinda drive by.
spywareblaster might help keep some stuff out.
 
RTFHTLM.dll is a MS file.
Check this article for some possible clues.

http://support.microsoft.com/default.aspx?scid=kb;en;318658



Chuck said:
Yeah this is something I've never seen before either as well. My wife was
on my computer surfing the night before, and I have it as secure as I know
to make it, and since I see html in that line I agree that it looks like
something from a web page that was trying to get, change, copy or do
something with my Outlook files. Checked all the sources I could find for
anything that would do something like that, and nothing really matches.
Went through all my INI files and cookies for anything like it, and have
been searching my registry for the like as well. Have ran 4 updated virus
checkers, and spyware detectors, and everything else I could think of, and
nothing has been found. After many re-boots it hasn't come back, and for
the moment this one has me scratching my head. Pretty scary when you've
done all that you can and something still managed to get in and do something
as big as change your autoexec.bat. I will go ahead and set the attribute
to read only for now, and keep my eye on my system.

I just hope that there is a special place set aside in hell that is hotter
and more miserable than all the other areas just for those that write this
stuff.


don't know what it is either, but don't look good, make
sure its gone, maybe a trojan, sometimes you can get them
just by going to a web site, kinda drive by.
spywareblaster might help keep some stuff out.
-----Original Message-----
WIN98SE System
===============

Turned on my computer and I heard it beep a few times, something I've never
heard it do before and I saw a very odd file pop up as it booted. I ran all
my virus software finding nothing, but found this very odd line in my
AUTOEXEC.BAT.

LsOUTLOOKFiles>ToT]jI{jf(=1&L[-81-] ÿÿÿÿ 7
rtfhtml.dll4FC!!gxsf(Ng]qF`H{LsOUTLOOKFiles>ToT]jI{jf (=1&L[-81-]

Here is how it was placed.

SET BLASTER=A220 I7 D1 H7 P330 T6
SET SBPCI=C:\AUDIOPCI
LsOUTLOOKFiles>ToT]jI{jf(=1&L[-81-] ÿÿÿÿ 7
rtfhtml.dll4FC!!gxsf(Ng]qF`H{LsOUTLOOKFiles>ToT]jI{jf (=1&L[-81-]

Is this a hijacker or trojan or something else? I removed it, but would
like to know how it got there and what it might be.

Thank you
Chuck


.
Click to expand...
Click to expand...
 
Thank you, my machine is 98SE only. Reading here that the cause is related
to a trial version of Office XP being installed, but that does not apply to
me since I've never done that. I have Office 2000 OEM, and have nothing to
do with XP. Here is what MS states as the cause.

CAUSE
This behavior may occur if you have a trial version of Microsoft Office XP
installed on your computer, and you install Microsoft Office 2000 without
first removing the trial version of Office XP.

I also have none of the symptoms as follows:.

When you try to send or receive messages in Outlook 2000, any of the
following behaviors may occur:
Outlook downloads one message and then stops responding.
The message that you downloaded is duplicated when you try to send or
receive messages again.
You may receive an error message similar to the following:

Outlook has generated errors... module rtfhtml.dll

NOW the only thing I can think this might be is due to the fact that I have
installed every IE update that MS has put out and perhaps there was some
Office XP files in those updates that may have caused this.

I am preparing a detailed feedback report to send to Microsoft just to make
them aware of this. I will post any replies that they may send back to me.




RTFHTLM.dll is a MS file.
Check this article for some possible clues.

http://support.microsoft.com/default.aspx?scid=kb;en;318658



Chuck said:
Yeah this is something I've never seen before either as well. My wife was
on my computer surfing the night before, and I have it as secure as I know
to make it, and since I see html in that line I agree that it looks like
something from a web page that was trying to get, change, copy or do
something with my Outlook files. Checked all the sources I could find for
anything that would do something like that, and nothing really matches.
Went through all my INI files and cookies for anything like it, and have
been searching my registry for the like as well. Have ran 4 updated virus
checkers, and spyware detectors, and everything else I could think of, and
nothing has been found. After many re-boots it hasn't come back, and for
the moment this one has me scratching my head. Pretty scary when you've
done all that you can and something still managed to get in and do something
as big as change your autoexec.bat. I will go ahead and set the attribute
to read only for now, and keep my eye on my system.

I just hope that there is a special place set aside in hell that is hotter
and more miserable than all the other areas just for those that write this
stuff.


don't know what it is either, but don't look good, make
sure its gone, maybe a trojan, sometimes you can get them
just by going to a web site, kinda drive by.
spywareblaster might help keep some stuff out.
-----Original Message-----
WIN98SE System
===============

Turned on my computer and I heard it beep a few times, something I've never
heard it do before and I saw a very odd file pop up as it booted. I ran all
my virus software finding nothing, but found this very odd line in my
AUTOEXEC.BAT.

LsOUTLOOKFiles>ToT]jI{jf(=1&L[-81-] ÿÿÿÿ 7
rtfhtml.dll4FC!!gxsf(Ng]qF`H{LsOUTLOOKFiles>ToT]jI{jf (=1&L[-81-]

Here is how it was placed.

SET BLASTER=A220 I7 D1 H7 P330 T6
SET SBPCI=C:\AUDIOPCI
LsOUTLOOKFiles>ToT]jI{jf(=1&L[-81-] ÿÿÿÿ 7
rtfhtml.dll4FC!!gxsf(Ng]qF`H{LsOUTLOOKFiles>ToT]jI{jf (=1&L[-81-]

Is this a hijacker or trojan or something else? I removed it, but would
like to know how it got there and what it might be.

Thank you
Chuck


.
Click to expand...
Click to expand...
 
Then what you assumed that some malware was trying to get to your
Autoexec.bat file was probably correct. Keep an eye on it.
It was a good idea to make it read only, but if the malware is able to get
to your computer it may also be able to change it's properties.

Look at the security issues on this site.
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm




Chuck said:
Thank you, my machine is 98SE only. Reading here that the cause is related
to a trial version of Office XP being installed, but that does not apply to
me since I've never done that. I have Office 2000 OEM, and have nothing to
do with XP. Here is what MS states as the cause.

CAUSE
This behavior may occur if you have a trial version of Microsoft Office XP
installed on your computer, and you install Microsoft Office 2000 without
first removing the trial version of Office XP.

I also have none of the symptoms as follows:.

When you try to send or receive messages in Outlook 2000, any of the
following behaviors may occur:
Outlook downloads one message and then stops responding.
The message that you downloaded is duplicated when you try to send or
receive messages again.
You may receive an error message similar to the following:

Outlook has generated errors... module rtfhtml.dll

NOW the only thing I can think this might be is due to the fact that I have
installed every IE update that MS has put out and perhaps there was some
Office XP files in those updates that may have caused this.

I am preparing a detailed feedback report to send to Microsoft just to make
them aware of this. I will post any replies that they may send back to me.




RTFHTLM.dll is a MS file.
Check this article for some possible clues.

http://support.microsoft.com/default.aspx?scid=kb;en;318658



Chuck said:
Yeah this is something I've never seen before either as well. My wife was
on my computer surfing the night before, and I have it as secure as I know
to make it, and since I see html in that line I agree that it looks like
something from a web page that was trying to get, change, copy or do
something with my Outlook files. Checked all the sources I could find for
anything that would do something like that, and nothing really matches.
Went through all my INI files and cookies for anything like it, and have
been searching my registry for the like as well. Have ran 4 updated virus
checkers, and spyware detectors, and everything else I could think of, and
nothing has been found. After many re-boots it hasn't come back, and for
the moment this one has me scratching my head. Pretty scary when you've
done all that you can and something still managed to get in and do something
as big as change your autoexec.bat. I will go ahead and set the attribute
to read only for now, and keep my eye on my system.

I just hope that there is a special place set aside in hell that is hotter
and more miserable than all the other areas just for those that write this
stuff.


don't know what it is either, but don't look good, make
sure its gone, maybe a trojan, sometimes you can get them
just by going to a web site, kinda drive by.
spywareblaster might help keep some stuff out.
-----Original Message-----
WIN98SE System
===============

Turned on my computer and I heard it beep a few times, something I've never
heard it do before and I saw a very odd file pop up as it booted. I ran all
my virus software finding nothing, but found this very odd line in my
AUTOEXEC.BAT.

LsOUTLOOKFiles>ToT]jI{jf(=1&L[-81-] ÿÿÿÿ 7
rtfhtml.dll4FC!!gxsf(Ng]qF`H{LsOUTLOOKFiles>ToT]jI{jf (=1&L[-81-]

Here is how it was placed.

SET BLASTER=A220 I7 D1 H7 P330 T6
SET SBPCI=C:\AUDIOPCI
LsOUTLOOKFiles>ToT]jI{jf(=1&L[-81-] ÿÿÿÿ 7
rtfhtml.dll4FC!!gxsf(Ng]qF`H{LsOUTLOOKFiles>ToT]jI{jf (=1&L[-81-]

Is this a hijacker or trojan or something else? I removed it, but would
like to know how it got there and what it might be.

Thank you
Chuck


.
Click to expand...
Click to expand...
Click to expand...
 
You must log in or register to reply here.

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

What is this??????? 2
Attachment 9
Svhost.exe bug relapse from SP2 [1/2] 0
explorer.exe crashes 4

Back
Top