Windows sysinternals

Chapter 17 Hangs and Sluggish Performance 407
I had never heard of gp.ocx, so I opened DLL view and searched for it in the Iexplore.exe
process. It describes itself as “getPlus(R) ActiveX Control”, from NOS Microsystems Ltd.
(See Figure 17-4.)
FIGURE 17-4 Finding out about gp.ocx in DLL View.
I Bing-searched for “NOS Microsystems” and found its Web page. (See Figure 17-5.) It looked
like a legitimate downloader, and I vaguely recalled seeing the name “getPlus” on the Adobe
Reader download program. I then ran Autoruns and verified that gp.ocx was not configured
to auto-start and that it would get loaded again only if a Web page specifically invoked
it, which I considered unlikely. I terminated Iexplore.exe in Procexp and restarted Internet
Explorer. After verifying that it hadn’t loaded gp.ocx again, I closed the case.
FIGURE 17-5 NOS Microsystems’ Web page.
www.it-ebooks.info