Re: What is "Backdoor.Winbach" as reported by eTrust Pest Patrol?

From: Maurice N ~ MVP (maurice_at_mvps.org)
Date: 08/17/05 

Date: Wed, 17 Aug 2005 06:18:31 -0500

This link at MS is a database of DLL files for MS Windows as well as other programs.
DLL Help Database http://support.microsoft.com/dllhelp/

DSCAN16 & DSCAN32 are not Windows or MS dlls. Delete them. Let them sit in your Recycle Bin for a while. Then rerun your antivirus.

Turn off your antivirus If and when you run another antivirus utility, and any malware detector.

Here's one free virus-cleanup tool to use, even though it will involve time and effort. I suggest you get & run SYSCLEAN from Trendmicro.

See PA Bear's notes on Sysclean from TrendMicro.
Scanning with SYSCLEAN Robear's way
http://aumha.net/viewtopic.php­?t=10610 

-- 
Maurice N
MVP  Windows - Shell / User
-----
Michael wrote:
> I have XP sp2 running on my Compaq Presario M2105US notebook.
> 
> RoadRunner provides my Internet connection and Time Warner also
> provides a suite of virus, firewall, spyware programs from Computer
> Associates. eTrust Pest Patrol is one of those programs and when I
> ran it just a while ago it indicated that I had "Backdoor.Winbach"
> and two files were singled out C:\WINDOWS.dscan16.dll and
> C:\WINDOWS.dscan32.dll 
> 
> When I went to the CA website to research removing this thing, it
> gave a long list of running processes that I was supposed to kill
> (none of them were running on my system as far as I could tell), a
> longer list of DLL's that I was supposed to unregister (over my head)
> and a long list of file I was supposed to remove (none of them
> existed when I searched for them). 
> 
> So is this a real threat or is it some sort of false alarm or what?
> If I do indeed have some sort of Backdoor trojan horse or whatever,
> won't my firewall alert me to someone trying to contact the program?
> Can I safely delete just the dscan16.dll and dscan32.dll files, or
> will that have an adverse effect on other aspects of my computer.
> 
> In short, is this anything to worry about?
> 
> Michael

Relevant Pages

  • Re: What is Backdoor.Winbach as reported by eTrust Pest Patrol scan?
    ... This link at MS is a database of DLL files for MS Windows as well as other programs. ... DLL Help Database http://support.microsoft.com/dllhelp/ ... I suggest you get & run SYSCLEAN from Trendmicro. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: What is Backdoor.Winbach as reported by eTrust Pest Patrol scan?
    ... This link at MS is a database of DLL files for MS Windows as well as other ... DSCAN16 & DSCAN32 are not Windows or MS dlls. ... Then rerun your antivirus. ... I suggest you get & run SYSCLEAN from Trendmicro. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: .Net packaging/wrapper application?
    ... it just didn't work well in reality due to DLL ... Windows works is to look in the executable's directory for a needed DLL ... the way apps used to work when they developed Windows. ... Looks to me like Jim is looking for the .NET equivalent of compiling ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Unnown process... 5eplorer.exe
    ... do not remove the cause (a "super"-hidden .dll program) but only remove ... symptom files and registry settings. ... It has all permissions but 'copy' denied to everyone, ... then by using the Windows XP Recovery Console. ...
    (microsoft.public.win2000.general)
  • Re: WinSxS, functional under 2k ?
    ... The newSide-by-Side Assembly technology was introduced with Windows XP to help reduce or eliminate DLL Hell. ... If you recall earlier Windows versions, like Windows 95, when you installed an application you were warned if the installer tried to replace a DLL from the system folder with an older version and you were asked if you wanted to accept the change. ... Until Windows XP it wasn't so easy to use different versions of shared system DLLs, that is what the new Side-by-Side assemblies attempts to resolve. ...
    (microsoft.public.win2000.general)