Jump to content


Photo

sexual.ocx - malware?


  • Please log in to reply
11 replies to this topic

#1 sandman

sandman

    Member

  • Full Member
  • Pip
  • 8 posts

Posted 30 July 2004 - 04:32 AM

Whilst checking out the latest PestPatrol false alarm (sigh!), I noticed that I had an ActiveX control called sexual.ocx in my Windows\System directory. Spybot, Ad-Aware, SpySweeper and PestPatrol do not complain about it and several Web searches have shown up nothing so does anyone know anything about it?

#2 bpm3k

bpm3k

    Member

  • Full Member
  • Pip
  • 13 posts

Posted 05 August 2004 - 02:56 AM

Doesn't sound good to me.

#3 rosso_acido

rosso_acido

    Earl of Mysterious Briefcases

  • Full Member
  • PipPipPipPip
  • 286 posts

Posted 05 August 2004 - 05:06 AM

Well, it's not a Windows system file for sure. :p

You could try renaming it or moving it to a different location. Then restart the PC and check to see that everything works fine. If something goes wrong, you can always give it its original name again or put it back where it was.

If on the other hand nothing unusual happens and all your programmes open without problem, then it's most probably a leftover from a previous infection(?) or an application you uninstalled, and chances are it can be (more or less) safely deleted.

R. :wave:
I am the iron anchor.

#4 Seventeen

Seventeen

    Ad hater

  • Full Member
  • Pip
  • 18 posts

Posted 08 August 2004 - 12:45 AM

Do you have Spyware Guard or Spyware Blaster installed??

#5 CyberRaptor

CyberRaptor

    Move Zig

  • Full Member
  • PipPipPip
  • 161 posts

Posted 08 August 2004 - 12:58 AM

Well, it's not a Windows system file for sure.


You just never know. Maybe Microsoft has a sense of humor no one knew about until now.

#6 rosso_acido

rosso_acido

    Earl of Mysterious Briefcases

  • Full Member
  • PipPipPipPip
  • 286 posts

Posted 08 August 2004 - 05:25 AM

LOL! If they do have any sense of humour at all, I bet they're the only ones that laugh with their own jokes. :weee:

R. :wave:
I am the iron anchor.

#7 BriosCometfyre

BriosCometfyre

    Member

  • Full Member
  • Pip
  • 55 posts

Posted 09 August 2004 - 01:05 AM

Sounds like something you got from some porn site, which most likely means its bad, or at least not useful to anything but possibly something porn-involved.

#8 sandman

sandman

    Member

  • Full Member
  • Pip
  • 8 posts

Posted 10 August 2004 - 04:36 AM

Do you have Spyware Guard or Spyware Blaster installed??

I use SpywareBlaster but not SpywareGuard. OTOH I have SpySweeper running all of the time when online (I am on dialup) and use Spybot, Ad-Aware and PestPatrol for scanning - a real belt-and-braces approach! None of them take any any notice of it.

Thanks for the other suggestions - I will try renaming it and see if anything falls over. It could be part of an old installation as I was very naive about spyware until I came across the SpyWareInfo site. Many thanks everyone. I will let you know if I find anything else about it.

#9 Seventeen

Seventeen

    Ad hater

  • Full Member
  • Pip
  • 18 posts

Posted 11 August 2004 - 12:30 PM

It is more then likely something Spyware Blaster put there, it is called a kill bit, it tells IE to automatically reject it if comes across it, Pest Patrol kept doing that on me also and knocking out the protection for it, if you do do anything, just make sure to check Spyware Blaster and make sure that it is protected against.

Edited by Seventeen, 11 August 2004 - 12:31 PM.


#10 JRosenfeld

JRosenfeld

    Advanced Member

  • Full Member
  • PipPipPip
  • 143 posts

Posted 11 August 2004 - 01:58 PM

Seventeen,

Spywareblaster does not put any files anywhere (other than its own, of course, :-). The kill bits are entries in the registry, not files in a Windows folder.

Edited by JRosenfeld, 11 August 2004 - 01:58 PM.


#11 Seventeen

Seventeen

    Ad hater

  • Full Member
  • Pip
  • 18 posts

Posted 11 August 2004 - 07:10 PM

Seventeen,

Spywareblaster does not put any files anywhere (other than its own, of course, :-). The kill bits are entries in the registry, not files in a Windows folder.

Sorry, I thaught he was talking about the Registry, guess I got confused, my bad.

#12 sandman

sandman

    Member

  • Full Member
  • Pip
  • 8 posts

Posted 16 August 2004 - 04:09 AM

I will let you know if I find anything else about it.

I have now found out that it is supposedly the "helicon quiz control". After some searching, I have found that Helicon are publishers and/or distributors of the Hutchinson reference guides such as the Hutchinson Multimedia Encyclopedia. Many of these include a quiz as they are intended for use by students as revision aids.

I actually have the HME installed so I renamed the active-X control and ran the program. It worked quite happily, even when I tried the quiz so it may be unconnected. I will try contacting Helicon support and see if they can shed any light on this. Whatever it is, malware or not, it has a stupid name!




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button