Start Up DLLs

V

vivekphlp

New member
Recenty my system was affected with Rootkit & i had formatted by C drive. My other drives cant be opened in the normal way. I have to use Explorer/ type the drive name in command promt..

When i was checking for my startup entries tho S&D i found that the DLLs
1) WINotify.dll
2) crypt32.dll
3) cryptnet.dll
4) cscdll.dll
5) wlnotify ( 4entires where there -
one value is "Schedule"
another "ScCertProp"
another "wlballoon"
another "termsrv"

KEY - VALUE - COMMAND LINE
WinLogon - crypt32chain - crypt32.dll
WinLogon - cryptnet - cryptnet.dll
WinLogon - cscdll - cscdll.dll
WinLogon - ScCertProp - wInotify.dll
WinLogon - Schedule - wInotify.dll
WinLogon - sclgntfy - sclgntfy.dll
WinLogon - SensLogn - WINotify.dll
WinLogon - termsrv - wInotify.dll
WinLogon - wlballoon - wInotify.dll

this link http://www.softwaretipsandtricks.com/dangerous_files/5081-WINOTIFYDLL.html
Says entry is a dangerous spy ware . Is it TRUE plz help.. .
 
There difference between the dll that is in your startup entry and what you are looking up and keep providing references for.

Your startup entry is WlNotify.dll (with a lower case "L" as the second letter). You keep looking up WINotify.dll (with an upper case "I" as the second letter).

WLNOTIFY.DLL is a legitimate Microsoft dll file.
_______________

I really don't know what is causing the problems with your disk. Did you go into Disk Management and assign a drive letter to the disk?
 
Thanks :)
By the by the problem with oppening my drives started after the attack of "Hackit.Rootkit"... whenever i try to open the drive it displays "open with" dialog... I have to use
RUN -> "drive name"
 
You must log in or register to reply here.
Back
Top