Jump to content


Photo

What deos IMAGEHLP.dll do?


  • Please log in to reply
4 replies to this topic

#1 Legion5

Legion5

    Member

  • Full Member
  • Pip
  • 16 posts

Posted 06 July 2004 - 04:10 PM

I know this is a windows component file but what is its purpose, google just gives some pointless results about it so what is the purpose of it?

The reason is because of 2 things.

1 this .dll has seemed to be acting very buggy every since I was infected with about:blank spam bho, and 2 for some reason programs that use it seem to display the about:blank installer "You have spyware" pop ups in their ads (AIM and Overnet are the first ones that come to mind), and both these programs I know use these .dlls.

Now I'm not going to make any theoretical suggdestions here but activity like this has been displayed before when the coolwebs spam virus infected Windows Media Player's exe in one of its versions.

So I don't think it would be too far off to say that about:blank might have infected IMAGEHLP.dll to display its pop-up spam in exe's that display internet explorer windows in them, ofcourse using very very poor coding which makes it unstable no doubt.

Also for some reason even in safe mode you can't delete the .dll similarly do the normal about:blank .dll install, though this is just speculation as of now.

#2 Legion5

Legion5

    Member

  • Full Member
  • Pip
  • 16 posts

Posted 06 July 2004 - 09:13 PM

Bump

#3 Legion5

Legion5

    Member

  • Full Member
  • Pip
  • 16 posts

Posted 07 July 2004 - 05:59 AM

bump 2 this could be segnificant, or not would be nice if some one replied though...

#4 bigbuck

bigbuck

    Member

  • Full Member
  • Pip
  • 33 posts

Posted 07 July 2004 - 07:47 AM

try

http://search.micros....dll&View=en-us

#5 Kizz

Kizz

    Member

  • New Member
  • Pip
  • 1 posts

Posted 03 August 2004 - 10:45 AM

MSDN ImageHlp info

It's to do with executable images - accessing EXEs and DLLs




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button