How can you detect and defend against BHO-based attacks?
Detection involves checking IE's add-ons under Tools > Manage Add-ons and examining the DLLs loaded by the IE process. Defense relies on preventing the initial compromise that grants administrator privileges, as BHO exploitation requires admin rights to register the component. The article provides testing and defense insights: Implementing IE Browser Hijacking Using BHO.
detectiondefenseIE add-onsprocess inspectionadmin privileges