I found this on a windows 98 system, but it should be similar on any MS Windows machine.
What it does:
Installs se.dll in your temp directory.
Installs eabi.dll in the \windows\system directory (system32 on Windows XP or Windows 2000)
Creates a Browser Helper Object to automatically reload / re-install itself on the fly, with multiple registry entries.
Creates startup command in registry.
To repair:
Windows XP & 2000 Users click here to skip the win98 section.
Windows 95 & 98 Users: For most windows 95 & 98 users this will work. It will not work if you have profiles setup, or your windows directory or temp directory environment variable is set to anything other than the standard.
Boot into safe mode command prompt. (By hitting F8 BEFORE Windows boots, then choosing with your up/down arrow keys safe mode command prompt.
Delete the offending files:
At the command prompt, type del c:\windows\system\eabi.dll and hit enter.
Then type del c:\windows\temp\se.dll and hit enter.
Hit ctl-alt-del to restart the computer. Start the computer in safe mode by hitting F8 before windows starts to get a startup menu, then choose safe mode.
When windows is loaded, go to start / run. Type regedit and hit OK.
In the left pane, go to the top (my computer). Go to edit / find. Type in eabi.dll and delete all references you find.
Go back to the top in the left pane, highlight my computer. Go to edit / find, type in se.dll and delete all references you find.
In the left pane, go to hkey_local_machine\software\microsoft\windows\currentversion\windows\currentversion\explorer\browser helper objects. Hit the plus sign under it. Highlight each key under it. Delete any key under it containing eabi.dll. Personally, I delete all browser helper objects I find, but you may actually want something in there. You can highlight each one on the left, and look in the right to get an idea of what it is installed by, and where.
Next, go to hkey_local_machine\software\microsoft\windows\currentversion\windows\currentversion\run. In the right pane, delete the reference to se.dll.
Last, run your favorite spyware removal program. Run it (while still in safe mode). It will help clean up the remnants of your manual removal.
Reboot the computer and give it a try!
If I have helped you, maybe you could help me buy more bandwidth? Or a Six Pack would be nice! :-)
Windows XP users: This should work, but the example I found was on a windows 98 machine, so I may be a little off. Please let me know if i missed anything! Thanks!
Boot into safe mode command prompt. (By hitting F8 BEFORE Windows boots, then choosing with your up/down arrow keys safe mode command prompt.
Logon. When windows loads, delete the offending files:
At the command prompt, type del c:\windows\system32\eabi.dll and hit enter.Note that your windows directory could be \winnt instead of \Windows. If so, please substitute it where necessary.
Hit Ctl-Alt-Del. In the task manager, go to file, new task, %temp%
Delete se.dll. Actually, I'd delete everything in there, but as far as this particular pest is concerned, se.dll is the one you need to worry about.
Hit Ctl-Alt-Del. In the task manager, go to file, new task, type regedit.
In the left pane, go to the top (my computer). Go to edit / find. Type in eabi.dll and delete all references you find.
Go back to the top in the left pane, highlight my computer. Go to edit / find, type in se.dll and delete all references you find.
In the left pane, go to hkey_local_machine\software\microsoft\windows\currentversion\windows\currentversion\explorer\browser helper objects. Hit the plus sign under it. Highlight each key under it. Delete any key under it containing eabi.dll. Personally, I delete all browser helper objects I find, but you may actually want something in there. You can highlight each one on the left, and look in the right to get an idea of what it is installed by, and where.
Next, go to hkey_local_machine\software\microsoft\windows\currentversion\windows\currentversion\run. In the right pane, delete the reference to se.dll.
Finally, run your favorite spyware removal program. Run it (while still in safe mode). It will help clean up the remnants of your manual removal.
Reboot the computer & give it a try!
If I have helped you, maybe you could help me buy more bandwidth? Or a Six Pack would be nice! :-)