WINNT32.DLL
What you should do about WINNT32.DLL:
Your PC may be infected. The presence of a file called WINNT32.DLL is a possible sign of infection.
You should urgently check your PC to make sure it is not infected. The free version of Prevx CSI will scan your PC in less than two minutes and check for millions of spyware and malware infections including WINNT32.DLL. Don't take the risk, check your PC now.
What we know about WINNT32.DLL:
The filename WINNT32.DLL was first seen on Apr 9 2008 in NETHERLANDS. It has also been seen in the following geographical regions of the Prevx community:
- The UNITED KINGDOM on May 18 2008
- SPAIN on Apr 26 2008
- The EUROPEAN UNION on May 18 2008
- SLOVENIA on May 20 2008
- GERMANY on Apr 26 2008
The most common file size is 12,800 bytes. But the following file sizes have also been seen:
- 12,288 bytes
- 10,240 bytes
- 106,496 bytes
The unsafe files using this name are associated with the malware group Win32/Agent.Some files using the name WINNT32.DLL are also associated with the malware groups:
- Win32.Email-Worm.Gen
- Trojan.Downloader
These files may have the following Vendor, Product, Version Information in the file header
- OnDemand Software, Inc.; WinINSTALL 32-bit Native Network Library; 8.50.17.20
WINNT32.DLL has been seen to perform the following behavior(s):
- Adds a Winlogon Notification DLL to automatically load on system start up
WINNT32.DLL has been the subject of the following behavior(s):
- Registered as a Dynamic Link Library File
- Created as a process on disk
- Added as a Winlogon Notification DLL to automatically load on system start up
- Deleted as a process from disk
WINNT32.DLL can also use the following file names:
- WINNT32.DL_
- 05345129.SVD
- 32104315.DLL
- 24716049.DL_
- 07060149.DLL
- 78518247.SVD
- 23055701.DTA
- 44796179.SVD
- 73052815.DLL
- 43560379.DAT