Afcore.Y ullaixf.dll what is it good for? [wind98]

[kelvinq]

nod32 found Afcore.Y trojan in ullaixf.dll
then it renamed it
with the dll renamed there is one extra process running
ddhelp.exe
strangely, there is no file called dllhelp.exe on C:

on another wind98 machine there is no ullaixf.dll

so what is it???

Strangely, with ullaixf.dll renamed, there is nothing wrong with the
first wind98 box, except it gives a warning message on startup.

ullaixf.dll is not found on microsoft.com, nor google


Why do I get the idea that one fine morning, all the Microsoft users are going
to rise up, leave their trojan infested systems, and convert en-mass to Linux?

 

[Boyd Williston]

(e-mail address removed) (kelvinq) wrote in

nod32 found Afcore.Y trojan in ullaixf.dll
then it renamed it
with the dll renamed there is one extra process running
ddhelp.exe
strangely, there is no file called dllhelp.exe on C:

on another wind98 machine there is no ullaixf.dll

so what is it???

Strangely, with ullaixf.dll renamed, there is nothing wrong with the
first wind98 box, except it gives a warning message on startup.

ullaixf.dll is not found on microsoft.com, nor google


Why do I get the idea that one fine morning, all the Microsoft users
are going to rise up, leave their trojan infested systems, and convert
en-mass to Linux?

ullaixf.dll is a part of afcore.y -- which consists of two parts, an
installer and a dll named with seven random letters. See
www.sophos.com/virusinfo/analyses/trojafcorey.html
The error message is the other part of the virus looking for the dll.

 

[null]

Why do I get the idea that one fine morning, all the Microsoft users are going
to rise up, leave their trojan infested systems, and convert en-mass to Linux?

Never going to happen since some of us don't allow Trojans, parasites,
viruses and other malware to run on our Windoze PCs.


Art
http://www.epix.net/~artnpeg