Expert: Carolyn Meinel - 10/10/2005

Question
I'm running Windows XP and Internet Explorer 6.0.  My free version of WinPatrol alerted me to a new IE Helper, identified as ssqrp.dll.  A subsequent scan with my free version of AVG antivirus detected a virus called Java/ByteVerify, which I moved to the vault.  Trend Micro's free scan detected three versions of that virus in an archive file, and deleted the file.  Ad-Aware, Spybot and CWShredder haven't detected anything.  I've tried deleting all of the browser helper objects from the registry, but one keeps coming back.  Presumably, that's ssqrp.dll. I've deactivated it with BHODemon, but WinPatrol continues to detect it.  Is it a threat?  If so, I would be grateful for any suggestions on dealing with it.  Also, if I were to switch to Fire Fox, would that neutralize any undetected bugs that are already on the machine?  Thank you for sharing your expertise.

Answer
If ssqrp.dll keeps on coming back, yes, you are right in viewing it with alarm.

If you switch to Firefox then you will be far safer because Firefox doesn't run Browser Helper Objects. Certainly ssqrp.dll won't be able  to run on it.

In general, Internet Explorer is a notorious for infecting computers with viruses, worms, Trojans, adsware and spyware, and enabling phishing attacks. By contraast, the programmers of Firefox have worked hard to make it safe, and are swift to fix even the tiniest bugs that people report. So your idea of switching is absolutely on target.

It's too bad that law enforcement hasn't come down on Microsoft for giving people a browser that enables so much crime to be committed against the users, and doing this year after year and making it even more dangerous every year. The main culprit is ActiveX and those browser helper objects, and Microsoft insists on continuing to have this dangerous feature in its browser. But then I guess money talks.

So -- I can't really advise anyone to use Internet Explorer, even though there are programs that try to protect users from its dangers. The trouble is that the bad guys are always one step ahead of the good guys in exploiting Explorer. So why take the risk?