Forum Home
Press F1
 
Thread ID: 108624 2010-04-05 05:29:00 Suspect dll files rumpty (2863) Press F1
Post ID Timestamp Content User
873187 2010-04-05 08:52:00 What version of windows is it?

XPSP3
rumpty (2863)
873188 2010-04-05 09:07:00 Add something like .old at the end of them. See if anything complains. Theyre not windows files Speedy Gonzales (78)
873189 2010-04-05 09:19:00 Add something like .old at the end of them. See if anything complains. Theyre not windows files

As a rule there are hardly any dll files in the root of Windows, so I thought they were suspicious. I've moved them out for now.
rumpty (2863)
873190 2010-04-05 09:34:00 SpyDLLRemover didn't find them suspicious. No worries, I guess. Thanks for your help everyone. rumpty (2863)
873191 2010-04-05 15:54:00 Upload them to www.virustotal.com Agent_24 (57)
873192 2010-04-06 04:24:00 Upload them to www.virustotal.com

Hey, that's a great service at that site.

They didn't find anything much - a 5% possibility of being infected, if I read the report correctly.
rumpty (2863)
873193 2010-04-06 05:39:00 bs.dll; 74m.dll are parts of a Trojan Dropper Pancake (6359)
873194 2010-04-06 10:10:00 bs.dll; 74m.dll are parts of a Trojan Dropper

That's what I thought after checking them in Google, but no scanning program that I have tried so far said they are bad. Anyway, they are deleted now.
rumpty (2863)
873195 2010-04-06 10:36:00 .dlls are harmless alone. I wouldn't worry about it if you can delete it succesfully Ollie (794)
873196 2010-04-06 11:37:00 Hey, that's a great service at that site .

They didn't find anything much - a 5% possibility of being infected, if I read the report correctly .

Virustotal scans the files you upload by many different Antivirus programs .

It then tells you what each one detected, if anything .

5% means that 5% of the AVs that were used, reported the files as a virus .

You need to find the name of the malware that the files were detected as, and research it to see if it's bad .

You don't happen to still have a link to the analysis page?
Agent_24 (57)
1 2 3