ash.dll - Dangerous
%sysdir%\ash.dll
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
ASH.DLL steals the passwords and bank information.
Creates BHO {C6176B04-8896-4446-9939-E00EE94C420F}.
ASH.DLL tracks all Intertnet activity.
Modifies the value:
"Start Page" = "about:blank"
in the registry subkeys:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main
so that Internet Explorer opens to the "about:blank" page.
Modifies the Hosts file to prevent access to several Web sites.
Attempts to unregister and then delete the %System%\IEHELPER.DLL file.