Re: 132.dll

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 05/31/05


Date: Mon, 30 May 2005 18:28:10 -0400

From: "Umwhat" <me.somewhere@somewhere else.com>

| ...now this is very very peculiar , if you don't ask me , because I found
| this name while I browsed the registry driven by a smidgen of curiosity about
| a searcher called WhenUSearch . I found 132.dll by double clicking on a
| registry entry , the last kind of entry you could reach when looking through
| the registry where you would open a Window , you know , the last instance
| in the registry where you could open a window . Well , there were , what I
| think you call Binary numbers on the left side of the window like 06 08 00
| etc...and on the right side of the window , I had to scroll to get to the far
| right side of the window , was a whole lot of the usual ditto marks or
| commas or whatever you see would usually in there and as I scrolled down the
| list I came across 132.dll . Now when I look for 132.dll using Google I find
| 132.dll is a Trojan .
| My question is why would I find 132.dll in the registry when Avast and
| Microsoft AntiSpyware did not see it . As far as I can tell 132.dll has been
| around for quite a while .
| --
| signature

Here's what you should do. Search the hard disk(s) for 132.dll (search for hidden and
system files).

When you find it, Please submit "132.dll" to Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against several different AV vendor's scanners.

Another way to submit is to send the suspect file to the following email address
scan<at>virustotal.com
{ replace <at> with @ } with only the word SCAN as the subject.

Please post back the EXACT results.

Just becuase you have a pointer to a DLL in the Registry, it doesn't neccessarily mean it
exists on the hard disk.
Don't forget also that any file can be named anything and malware can use the same name as
legitimage OS or other software files.

-- 
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


Relevant Pages

  • Re: Logitech SetPoint software malfunction?
    ... Using Sysinternals Process Monitor, watching Logitech's Setpoint ... software screwing around with the registry value WheelScrollLines. ... error window, you may at least find out *when* Logitech is accessing ... The screen does not scroll when the mouse wheel is rotated. ...
    (alt.comp.hardware.pc-homebuilt)
  • Re: - Yahoo ups the ante, hijacks browsers through Adobe Reader 7
    ... One has to be a bit careful when deleting *everything* in the "Downloaded Objects" file. ... General tab. ... In the System Configuration Utility window, ... Remove all suspicious items from the registry ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: XP Home shows lsass.exe message
    ... Restore by backing up and replacing the current Registry files ... Hope this helps you with the Acer laptop, Mattias - you might try ... (and underneatht that, in the same window) ... Ron Martell Duncan B.C. Canada ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Please Help - MCX unable to connect
    ... expired and is throwing up a window which the MCX can't dismiss. ... >started my PC (the MCX was still in standby) and found the following Errors: ... >running the Media Center Experience, 'License Expiration Notice', with file ... >registry while an application or service was still using the registry during ...
    (microsoft.public.windows.mediacenter)
  • RE: Cant change home page, read others post
    ... The entry in the registry did change to the new ... homepage on the IE internet options window. ... "nass" wrote: ... and settings transfer to set it origonally when I bought the computer. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)