"DNSRSLVR32.DLL"

Fraudulent Security Program

Free PC Cleanup from Webroot

Use Webroot SecureAnywhere to remove DNSRSLVR32.DLL.

"Just when you thought it couldn't get any better or faster. The Webroot scanning engine is 'high octane' with a hidden nitrous oxide system. Bravo!!!" W. Lodzinski, SecureAnywhere User

Get Free PC Cleanup

Associated Malware Groups

The unsafe files using this name are associated with the malware groups:

Fraudulent Security Program
Cloaked Malware
Virus
Malicious Software

File Behavior

DNSRSLVR32.DLL has been seen to perform the following behavior:

The Process is packed and/or encrypted using a software packing process
Modifies System Runtime Policies to limit system usability
Writes to another Process's Virtual Memory (Process Hijacking)
This Process Deletes Other Processes From Disk
Executes a Process
This process creates other processes on disk
Registers a Dynamic Link Library File
Creates new folders on the system
Copies files
Injects code into other processes
Found on infected systems and resists interrogation by security products

DNSRSLVR32.DLL has been the subject of the following behavior:

Created as a new Background Service on the machine
Created as a process on disk
Executed as a Process
Has code inserted into its Virtual Memory space by other programs
Deleted as a process from disk
Terminated as a Process
Registered as a Dynamic Link Library File
Copied to multiple locations on the system
Added as a Winlogon Notification DLL to automatically load on system start up
Enabled as an In Process Object/Server - Common with DLL Injections

Country Of Origin

The filename DNSRSLVR32.DLL was first seen on Jul 25 2009 in the following geographical regions of the Webroot community:

The United States on Jul 25 2009
Japan on Nov 9 2009
Netherlands on Mar 24 2010
South Africa on Jun 1 2010
France on Oct 14 2010
Canada on Sep 28 2011

File Name Aliases

DNSRSLVR32.DLL can also use the following file names:

DGDERAPI32.DLL
AUTHFWGP32.DLL
DXVA232.DLL
EAPQEC32.DLL
DPNLOBBY32.DLL
FDBTH32.DLL
CRYPTEXT32.DLL
DIMSROAM32.DLL
DPNHUPNP32.DLL
ICARDIE32.DLL
ELS32.DLL
BROWSER32.DLL
CABINET32.DLL
BWCONTEXTHANDLER32.DLL
CCA32.DLL
CMIFW32.DLL
CLFSW323232.DLL
DBNETLIB32.DLL
ENCDEC32.DLL
CMCFG3232.DLL
CNXTAP3232.DLL
DWMAPI32.DLL
APPIDAPI32.DLL
BWUNPAIRELEVATED32.DLL
DOT3API32.DLL
DHCPSAPI32.DLL
DPVOICE32.DLL
DESKPERF32.DLL
DISKCOPY32.DLL
KBDSP32.DLL
D3DX10_3332.DLL
D3DX9_3332.DLL
CLBCATQ32.DLL
DNSEXT32.DLL
DMIME32.DLL
LSASS.EXE
DAVCLNT32.DLL
CTHWIUT32.DLL
GLMF3232.DLL
DOT3CFG32.DLL
HID32.DLL
DMSCRIPT32.DLL
DMUSIC32.DLL
FXSROUTE32.DLL
D3DCOMPILER_3932.DLL
INETPPUI32.DLL
D3DIM70032.DLL
DOT3MSM32.DLL
DPNMODEM32.DLL
DSPROP32.DLL
HNETMON32.DLL
DMOCX32.DLL
CMPBK3232.DLL
DMINTF32.DLL
COMCAT32.DLL
DEVENUM32.DLL
ESENT9732.DLL
ESENT32.DLL
DHCPCSVC32.DLL
DOCPROP32.DLL
D3DRM32.DLL
DIGEST32.DLL
ATIDDC32.DLL
IRCLASS32.DLL
D3DX9_3932.DLL
INITPKI32.DLL
DSOUND32.DLL
CDM32.DLL
DPLAY32.DLL
DANIM32.DLL
WOWFAXUI32.DLL
DHCPMON32.DLL
D3DCOMPILER_3332.DLL
COMUID32.DLL
DMSTYLE32.DLL
DMLOADER3232.DLL
COMCTL3232.DLL
D3DX9_2732.DLL
DIVX_XX1632.DLL
DIMSNTFY32.DLL
DS16GT3232.DLL
DDACLSYS32.DLL
FONTSUB32.DLL
DNSCMMC32.DLL
D3DX10_3432.DLL
D3DX9_3432.DLL
DRTPROV32.DLL
CABVIEW32.DLL
DOT3GPCLNT32.DLL
FECLIENT32.DLL
FWCFG32.DLL
DATACLEN32.DLL
DSQUERY32.DLL
C_ISCII32.DLL
CSCDLL32.DLL
DINPUT832.DLL
CPT12_MATH3232.DLL
RNR2032.DLL
HOTPLUG3232.DLL
DHCPCSVC632.DLL
DLLPTL3232.DLL
CSCSVC32.DLL
DPWSOCKX32.DLL
ATIPDLXX32.DLL
DEFRAGPROXY32.DLL
AVICAP3232.DLL
DMDSKMGR32.DLL
DDORES32.DLL
CONNECT32.DLL
DESKADP32.DLL
CSRSRV32.DLL
EFSADU32.DLL
DGRPSETU323232.DLL
CRYPTSVC32.DLL
CAMOCX32.DLL
CRTDLL32.DLL
CONFMSP32.DLL
DFRGUI32.DLL
FAULTREP32.DLL
HNETWIZ32.DLL
CP211_COMEAI32.DLL
COLBACT32.DLL
CLBCATEX32.DLL
DRPROV3232.DLL
DESKMON32.DLL
ATMLIB32.DLL
FUNCTIONDISCOVERYFOLDER32.DLL
COMPSTUI32.DLL
DSDMO32.DLL
D3DXOF32.DLL
CONSOLE32.DLL
H323MSP32.DLL
CRYPTUI32.DLL
BTPANUI32.DLL
COMPOBJ32.DLL
COMSNAP32.DLL
BIOCPL32.DLL
CMSTPLUA3232.DLL
CRYPTDLG32.DLL
COLORUI3232.DLL
CRYPTSP32.DLL
BDESVC32.DLL
BFE32.DLL
CERTMGR3232.DLL
COMREPL32.DLL
COMDLG323232.DLL
CAPISP32.DLL
COMREPL3232.DLL
CSCMIG32.DLL
BITSPRX332.DLL
CATSRV32.DLL
CORPOL32.DLL
BITSPRX532.DLL
BLACKBOX32.DLL
CERTPROP3232.DLL
CC3270MT32.DLL
CLB32.DLL
CLFSW3232.DLL
CTL3DV232.DLL
BLB_PS32.DLL
CSCUI32.DLL
BOOTSTR32.DLL
BRCOINST32.DLL
CSVER32.DLL
CDD32.DLL
CERTCLI32.DLL
CERTENC32.DLL
CMICRYPTINSTALL32.DLL
CMIINSTALLRESALL32.DLL
CMNCLIM32.DLL
CMSTPLUA32.DLL
CMUTIL32.DLL
CPFILTERS32.DLL
CNCC60032.DLL
FDE32.DLL
DSOUND3D32.DLL
DMUTIL32.DLL
CRYPT3232.DLL
DX8VB32.DLL
GETUNAME32.DLL
D3DIM32.DLL
COMPATUI32.DLL
BTSENDTO_WAB32.DLL
D3DX9_3532.DLL
DEVICEPAIRING32.DLL
EQNCLASS32.DLL
DMDSKRES32.DLL
DPVVOX32.DLL
DMCOMPOS32.DLL
FUNDISC32.DLL
D3DX10_3932.DLL
EHSTORAUTHN32.DLL
DXDIAGN32.DLL
DMDLGS32.DLL
EAPPGNUI32.DLL
FDEPLOY32.DLL
D3DCOMPILER_3632.DLL
CNVFAT32.DLL
CHXREADINGSTRINGIME32.DLL
CERTMGR32.DLL
CORPOL3232.DLL
CREDUI32.DLL
CRPPRESENTATION3232.DLL
CATSRV3232.DLL
D3D10CORE32.DLL
CATSRVUT32.DLL
CERTPROP32.DLL
CC3270MT3232.DLL
CFGBKEND32.DLL
COLORUI32.DLL
CRYPT323232.DLL
COMDLG3232.DLL
D3D10WARP32.DLL
CERTCLI3232.DLL
CERTENROLLUI32.DLL
BTHCI32.DLL
BRIDGERES32.DLL
CIC32.DLL
BROWSEUI32.DLL
CMLUA32.DLL
CONNECT3232.DLL
CRYPTUI3232.DLL
CRPPRESENTATION32.DLL
BTHPANAPI32.DLL
CHKWUDRV32.DLL
CSCAPI32.DLL
CNHI06A32.DLL
CSCUI3232.DLL
CSCMIG3232.DLL
CTL3DV23232.DLL
DMSYNTH32.DLL
FF_VFW32.DLL
FILEMGMT32.DLL
DNSHC32.DLL
CREDSSP32.DLL
DMCOMPOS3232.DLL
ERSVC32.DLL
ELSCORE32.DLL
BITSPERF32.DLL
D3DRAMP32.DLL
D3D832.DLL
D3D1132.DLL
D2D132.DLL
D2D13232.DLL
D3D1032.DLL
C_G1803032.DLL
FM2032.DLL
ES32.DLL
08701354.DAT

Filesizes

The following file size has been seen:

359,936 bytes
730,351 bytes
109,568 bytes
121,856 bytes
192,512 bytes
309,248 bytes
120,320 bytes

File Type

The filename DNSRSLVR32.DLL is used by multiple object types including Dynamic Link LIbraries,executable programs.

Help the Webroot Community to fight cyber crime

We are always looking for ways to improve the quality and speed of research to help us protect you from malicious software and cyber crime.

The filename referred to in this report is often associated with PC infections. If you have a program of this name on your PC and would like to help our research please tell us what you know in the form below:

I have this file on my PC and believe it is an infection
I have this file on my PC and think it has made my PC slower
My firewall asked if I wanted to let this file have access to the Internet
My PC will not work since I noticed this file on it
My antivirus detected this file but won't remove it
I know what this file is and believe it is a Safe program
I am the author of this file and would like to discuss how to have it reclassified as safe

Further Comments or information you'd like to share: (optional)

Your email address if you would like us to contact you about this file and any concerns you may have: (optional)

Virus, Spyware & Malware Center »