se.dll spyware

  • Thread starter Thread starter Brad Smallwood
  • Start date Start date
B

Brad Smallwood

Assume people know about this already but it degrades a
system quickly with some sort of interval popup and
keyboard monitoring (would not let me visit Microsoft
among other sites, presumably so I couldn't figure out how
to fix).

has two .dll files one is called se.dll the other is
randomly generated I believe and loaded in the windows
directory. Both are locked so can only delete thru safe
mode/dos. You need to delete both files to stop it from
reappearing. I used HijackThis to identify the other .dll
(in my case called hnmma.dll)
 
I got what look to be pretty useful hits with this search:

trojan.startpage symantec

This one has letter variants. Gonna take manual effort.
 
Back
Top