Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

SetupResources.dll


  • Please log in to reply
1 reply to this topic

#1 ringoes

ringoes

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:princeton, nj
  • Local time:06:52 AM

Posted 10 February 2011 - 03:03 PM

Build 2600.xpsp_sp3_gdr.101209-1647

While trying to edit Outlook 2003's appointment form I received a DWINTL20.DLL version error. I searched for DWINTL20 on my C drive and found numerous copies of it; some with Cyrillic lettering in the description. I scanned it with Malwarebytes' Anti-Malware and got an all clear. Nevertheless, I deleted all the copies and extracted a new copy from Microsoft's CAB file.

Then I decided to scan my entire C drive for *.DLL and came up with some more suspicious files. SetupResources.dll came up 50 times, varying in size from 14kb to 19kb; some with Cyrillic lettering in the description; some with German language descriptions; others with french descriptions; all in C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\***. For example: "Description: إعداد Dll للمورد التابع Satellite Resource"; "Copyright: Microsoft Corporation.كافة الحقوق محفوظة."

Nothing unusual is happening on my machine to indicate a virus; but being naturally paranoid, I would like to understand what's going on. Why does Microsoft.NET need 50 copies of the same DLL? Should I worry?

thanks

BC AdBot (Login to Remove)

 


#2 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:09:52 PM

Posted 11 February 2011 - 03:18 AM

C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SetupCache\***. For example: "Description: إعداد Dll للمورد التابع Satellite Resource"; "Copyright: © Microsoft Corporation.كافة الحقوق محفوظة."

I am not sure why the system has a mix of languages - The Arabic items listed only franslate as ~ ~ like ~ ~ ' Verified copies' or 'Registered Trade marks' and similar items -
It is very odd to have a mix of languages on the one CD copy -
I would run sfc /scannow to see if there are odd files there - Followed by a chkdsk /r -
Go Start>Run ("Start Search" in Vista/7), type in:
sfc /scannow
Click OK (hold CTRL, and SHIFT, hit Enter in Vista/Win7).
Have Windows CD/DVD handy (with Vista/Win7, most likely, you won't need it).

Edited by noknojon, 11 February 2011 - 03:18 AM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users