Thread Solved

Join Date: Jul 2005
Posts: 2
Reputation: Reljoy is an unknown quantity at this point 
Solved Threads: 0
Reljoy Reljoy is offline Offline
Newbie Poster

serimlui.dll

 
0
  #1
Jul 9th, 2005
I have this dll in my windows\system32 directory.
I can't find it on the net using any of the major search engines.
It has been reported as being infected with a virus by
Microworld AntiVirus & Spyware Toolkit Utility
from
http://www.mwti.net/antivirus/mwav.asp
No OTHER antivirus tool I have used says I have a virus on my pc.
I have used etrust's inoculate, Trend Micro Housecall, Macafee's Stinger.
I regularly use Adaware, Spybot, BHOdemon.
All of these are up-to-date with their definitions.

Does anyone know if serimlui.dll is a nasty or benign?
Does anyone know what serimlui.dll belongs to?
Should I delete it?
What are the risks if I just delete a dll because I think it is suspicious?

Reljoy
Reply With Quote Quick reply to this message  
Join Date: Jul 2004
Posts: 2,964
Reputation: dlh6213 is on a distinguished road 
Solved Threads: 210
Team Colleague
dlh6213 dlh6213 is offline Offline
Posting Maven

Re: serimlui.dll

 
0
  #2
Jul 9th, 2005
First you should have the file scanned here:

http://virusscan.jotti.org/

If it comes up clean, you can try to get some info on it by going to the file and right-clicking on it. Then go to Properties and get whatever info you can (Company, Version, etc.). After that, right-click on it again, and chose Open With...; you may get a warning message, if you do, click on the Open With... button. Choose Notepad (or Wordpad) to open it with. Most likely you will just see a bunch of gibberish characters, but keep looking through it -- sometimes some tell-tale information is provided.

Let us know what you find out
Links to help you help yourself :

Protect Your PC & Avoid Infections -- http://www.daniweb.com/techtalkforums/thread27519.html

Cleanup Procedures & Tools -- http://www.daniweb.com/techtalkforums/thread27570.html

Infection Removal & HijackThis Use -- http://www.daniweb.com/techtalkforums/thread28196.html
Reply With Quote Quick reply to this message  
Join Date: Jul 2005
Posts: 2
Reputation: Reljoy is an unknown quantity at this point 
Solved Threads: 0
Reljoy Reljoy is offline Offline
Newbie Poster

Re: serimlui.dll

 
0
  #3
Jul 9th, 2005
OK, this site (that I'd never heard of) comes up with several of the scanners saying it is a backdoor for a trojan.

File: serimlui.dll
Status: INFECTED/MALWARE
MD5 25e6b8a0bc5fab198ed2ea9619f74074
Packers detected: -
Scanner results
AntiVir Found BDS/Afcore.AH.2
ArcaVir Found Trojan.Afcore.Aw
Avast Found Win32:Afcore
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found Trojan.Afcore-5
Dr.Web Found nothing
F-Prot Antivirus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found Backdoor.Win32.Afcore.aw
NOD32 Found nothing
Norman Virus Control Found nothing
UNA Found Backdoor.Afcore
VBA32 Found Backdoor.Afcore.6 (probable variant)

So I guess this means I should delete it.
I just hope that deleting it doesn't cause my computer problems by not having a .dll that it wants.

Thanks for your help.
Reply With Quote Quick reply to this message  
Join Date: Jul 2004
Posts: 2,964
Reputation: dlh6213 is on a distinguished road 
Solved Threads: 210
Team Colleague
dlh6213 dlh6213 is offline Offline
Posting Maven

Re: serimlui.dll

 
0
  #4
Jul 10th, 2005
Yes, you should go ahead and delete it; I doubt if there is anything in that .dll that your system will want
Reply With Quote Quick reply to this message  
Reply

This thread has been marked solved.
Perhaps start a new thread instead?
Message:



Similar Threads
Other Threads in the Viruses, Spyware and other Nasties Forum
Thread Tools Search this Thread



About Us | Contact Us | Advertise | DaniWeb | Acceptable Use Policy | RSS Feed

©2003 - 2009 DaniWeb® LLC