Results 1 to 12 of 12

Thread: auto.search.msn.com/response.asp

  1. #1
    הבּרוּ נשׂאי כּלי יהוה mike's Avatar
    Join Date
    Mar 2001
    Posts
    491

    auto.search.msn.com/response.asp

    Under IE6, this URL is hardcoded somewhere (it's not in the registry). If you set up Google as your default search engine, it still sends the query to msn first, no doubt for data mining.

    EASY Mini-project: find the URL and replace it!

  2. #2
    just
    Guest
    It is in SHDOCLC.DLL which contains only resources. It contains all the cute IE 6 icons, dialogs, popup menus, etc.

    The url you are looking for can be found with a resource editor and changed. It is a String, with resource name 76, and it has number 1211 or 1214 depending on which one you want.
    Last edited by just; October 4th, 2003 at 19:18.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  3. #3
    Red wine, not vodka! ZaiRoN's Avatar
    Join Date
    Oct 2001
    Location
    Italy
    Posts
    922
    Blog Entries
    17
    Hi just,
    unfortunately (or fortunately :-p) I do not use Internet Explorer and I can not try this project. How do you discovered this dll? Can you tell us what you have done? Your explanation can help someone else.
    And you Mike, how did you solve the problem?

    Best regards,
    ZaiRoN

  4. #4
    I don't know about just, but I found the URL easily by doing a simple search through the files in the windows directory, and can see it there.

    Now that's it cured my curiousity, I'm back to my normal browser - Opera

  5. #5
    הבּרוּ נשׂאי כּלי יהוה mike's Avatar
    Join Date
    Mar 2001
    Posts
    491
    Quote Originally Posted by Zairon
    And you Mike, how did you solve the problem?
    I posted it here and waited for just to post his results

  6. #6
    just
    Guest
    Quote Originally Posted by ZaiRoN
    Hi just,
    unfortunately (or fortunately :-p) I do not use Internet Explorer and I can not try this project. How do you discovered this dll? Can you tell us what you have done? Your explanation can help someone else.
    And you Mike, how did you solve the problem?

    Best regards,
    ZaiRoN
    I did ascii then unicode string search in \windows\system\shdoc*.dll

    I knew shdocvw.dll file was related to IE because I used IE automation once for work and wondered about the weird filename it uses, so I remembered it. As there are more shdoc*.dll files in \windows\system\ I assumed they are related to IE as well.

    (just is also a happy Opera user )
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  7. #7
    sirius
    Guest
    Mallatia had spokes (explains) about that, and there is a riddle about the shdoclc.dll
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  8. #8
    Naides is Nobody
    Join Date
    Jan 2002
    Location
    Planet Earth
    Posts
    1,647
    Quote Originally Posted by sirius
    Mallatia had spokes (explains) about that, and there is a riddle about the shdoclc.dll
    DELTA: Another Right_On_Time post for your collection

  9. #9
    Administrator dELTA's Avatar
    Join Date
    Oct 2000
    Location
    Ring -1
    Posts
    4,206
    Blog Entries
    5
    Yep, I guess I can take at least some comfort in the fact that it contained something else than "thanks" though...

  10. #10
    Maybe he's referring to this essay, posted by +mala in 2003:

    http://www.reteam.org/essay.viewer?type=stegano&short=st1&short2=st2&id=3

    It was the only hit I got with "malatia + shdoclc.dll" but doesn't seem to be addressing a "riddle."

    Regards,
    JMI

  11. #11
    Naides is Nobody
    Join Date
    Jan 2002
    Location
    Planet Earth
    Posts
    1,647
    Quote Originally Posted by JMI
    Maybe he's referring to this essay, posted by +mala in 2003:

    http://www.reteam.org/essay.viewer?type=stegano&short=st1&short2=st2&id=3

    It was the only hit I got with "malatia + shdoclc.dll" but doesn't seem to be addressing a "riddle."

    Regards,
    What sirius is talking about is a cracking/cryptography challenge was/is going on in malathia site. you need to solve riddles to advance to each, progressively more difficult stage.

    Inside the shdoclc.dll there is an easter egg that malathia found and, as part of the challenge you have to locate, resverse and solve a question he posted.

  12. #12
    sirius
    Guest
    Quote Originally Posted by naides
    What sirius is talking about is a cracking/cryptography challenge was/is going on in malathia site. you need to solve riddles to advance to each, progressively more difficult stage.

    Inside the shdoclc.dll there is an easter egg that malathia found and, as part of the challenge you have to locate, resverse and solve a question he posted.
    yeah ,
    if you wanna get more go to :
    3564020356.org
    proof that you deserve it! and if you pass the 3rd riddle you'll find all the stuff

    see ya
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. Breaking a challenge response
    By squidge in forum RCE Cryptographics
    Replies: 5
    Last Post: March 16th, 2012, 10:42
  2. How can I learn to make an auto unpacking script for programs I have unpacked
    By PimpDawg in forum Advanced Reversing and Programming
    Replies: 3
    Last Post: June 25th, 2010, 10:40
  3. No response from injected code
    By joekames in forum OllyDbg Support Forums
    Replies: 4
    Last Post: October 28th, 2009, 19:54
  4. IDA auto function arguments
    By taylorjonl in forum Tools of Our Trade (TOT) Messageboard
    Replies: 5
    Last Post: May 3rd, 2005, 08:02
  5. IDA auto param recognition on OLDER versions with VALUES!!
    By Aimless in forum Tools of Our Trade (TOT) Messageboard
    Replies: 9
    Last Post: November 17th, 2001, 08:13

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •