Spyware and DLL's

  • Thread starter Thread starter Tyro
  • Start date Start date
T

Tyro

I recently installed a freeware version of "Zone Alarm" on
my pc. I am running Windows 2000 and Windows Me. Zone
Alarm tells me that WINKYHN.EXE, a required DLL file, and
RUNDLL32.EXE want to access the internet. I know that DLL
stands for dynamic links library. Why does a DLL file
need to access the internet? Is it possible for spyware
to masquerade as a DLL file? If so,how can I tell which
DLL's are safe and which are spyware? Will that show up
in Properties via the manufacturer's name?
 
I am not familiar with ME, but their are a number of reasons that a computer may
want to access the internet such as dns access to register with the dns server
for W2K unless you disable that setting in tcp/ip properties/advanced/dns,
checking for critical Windows Updates, checking for latest versions of software,
etc. If you have already run a virus and parasite scan and all looks good you
could let the access occur to see if it looks justified and if it does tell ZA
to not let it bother you again for that or if it does not then block it and tell
it not to notify you. You can also search Google web AND newsgroups for the
names of suspect files to see what the search finds to help you make a decision.
SpyBot S&D also has a process tracker in advanced mode that may help you
determine what the process relating to a folder/file is for or use Process
Explorer from SysInternals for advanced viewing of process properties. ---
Steve

http://www.sysinternals.com/ntw2k/freeware/procexp.shtml
 
Back
Top