• Undesirable program

    CRYPT32NET.DLL Information

    This is an undesirable program.

    This file has been identified as a program that is undesirable to have running on your computer. This consists of programs that are misleading, harmful, or undesirable.

    If the description states that it is a piece of malware, you should immediately run an antivirus and antispyware program. If that does not help, feel free to ask us for assistance in the forums.

  • Name
    crypt32net
  • Filename
    crypt32net.dll
  • Command
    C:\Windows\System32\crypt32net.dll
  • Description
    Added by the Troj/Banworm-I Trojan.

    Troj/Banworm-I may modify the HOSTS file which maps the URLs of selected websites to a loopback IP address or to its own IP addresses, in order to prevent access to certain sites and to control/hijack browsing. By this technique Troj/Banworm-I tries to block access to several security related sites and hijack a number of banking related sites.
  • File Location
    %System%
  • Startup Type
    This program uses the Winlogon Notify key to automatically start. This key is used to run certain programs when specific actions occur such as computer starting up, a user logging in or logging off, or a computer shutting down.
  • HijackThis Category
    O20 Entry
  • Note
    %System% is a variable that refers to the Windows System folder. By default this is C:\Windows\System for Windows 95/98/ME, C:\Winnt\System32 for Windows NT/2000, or C:\Windows\System32 for Windows XP/Vista/7.
  • This entry has been requested 4,526 times.

Disclaimer

It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. BleepingComputer.com will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Search Startups

Login

Remember Me
Sign in anonymously