how the spyware is catch event that activex install ?

  • Thread starter Thread starter bacsu
  • Start date Start date
B

bacsu

hello

i'm not american and my english expression is not good

i'm programer of visual C++
when i saw this program i think "how the spyware is catch
event that activex install ?"

i had found the answer many times on web site, but i don't
found that

anyone help me?
 
I can speak English fairly well, but I'm not a programmer, and, in
particular, I am not a Shell programmer. (In fact, I have shared in the
writing of a complete payroll program, but that was long ago....)

I believe that the secret is in the ShellExecuteHook handler that Microsoft
Antispyware installs. See Tools, advanced tools, system explorers, and
click on the left on ShellExcecuteHooks.

The general help for this category states:

Explorer: Windows Shell Execute Hooks
A shell execute hook is a program that is loaded into the Windows shell,
which is Explorer.exe. A shell execute hook program receives all execute
commands that are run on your computer. This type of integrated program can
either accept or reject a command to run a particular program.



What does this Explorer Display?

In this Explorer you can view and block any of your computer's Shell Execute
Hooks. Before blocking a Shell Execute Hook, please be aware that blocking
certain Shell Execute Hooks can cause your computer or some of your programs
to stop functioning normally.

The particular information about the Microsoft Antispyware hook is as
follows:

Microsoft.AntiSpyware.ShellExecuteHook.1This is a known Shell Excecute
Hook.Name: Microsoft AntiSpyware (Beta 1)Description: Microsoft AntiSpyware
Shell ExtensionPublisher: Microsoft CorporationFile path: d:\program
files\microsoft antispyware\shellextension.dllFile version:
1.0.0.509Technical Details:

CLSID: {9EF34FF2-3396-4527-9D27-04C8C1C67806}

ProgID: Microsoft.AntiSpyware.ShellExecuteHook.1

Original file name: ShellExtension.dll

MD5: f3a7b87726c87c8e5653df0e7da15a47
 
Back
Top