Results 1 to 8 of 8
  1. #1
    5 Star Lounger
    Join Date
    Mar 2010
    Location
    east coast
    Posts
    701
    Thanks
    89
    Thanked 8 Times in 8 Posts

    When is spyware just some gray area of social media tracking us and when is it a real threat.

    Ran mbam. Nothing found.
    win xppro sp3

    But strange things happen so often that I am still concerned.
    From time to time some file will try to call home at random.
    Yesterday it was a strange named dll that I cannot find any info on.
    fileas~1.dll got blocked by my security software.
    But when I search the pc neither fileas~1.dll NOR fileas.dll are found on the pc at all.

    It seems to me like there should be no programs trying to connect to the internet if I was not actively using them. And even then, it should be the program not some dll.

    My suspicious nature thinks some infection that mbam missed set up a temporary file to use to test an outbound connection to bring in more bad things.

    Cant find any info on fileas.dll nor any program that would use such a file.

    Any thoughts on why these mysterious programs try to call home from time to time?

  2. #2
    Super Moderator
    Join Date
    Jun 2011
    Location
    New England
    Posts
    4,745
    Thanks
    171
    Thanked 649 Times in 572 Posts
    Search for FileASSASSINExt.dll:

    What is FILEAS~1.DLL?


    (From Malwarebytes.)

    Bruce

  3. #3
    Super Moderator satrow's Avatar
    Join Date
    Dec 2009
    Location
    Cardiff, UK
    Posts
    4,485
    Thanks
    283
    Thanked 573 Times in 477 Posts
    Thanks, Bruce

    Reminds me of the time, several years ago, when I spent a couple of hours trying to work out what some 'unknown/nonexisting' file was that was running on a notebook - turned out it was a dynamically -loaded MSE file (the file name changed each time the PC booted) and I was re-scanning the notebook with MSE as part of a post-infection cleanup.

  4. #4
    WS Lounge VIP mrjimphelps's Avatar
    Join Date
    Dec 2009
    Location
    USA
    Posts
    3,396
    Thanks
    445
    Thanked 404 Times in 376 Posts
    Scan your computer with a pre-Windows scanner, such as Windows Defender Offline:
    http://windows.microsoft.com/en-us/w...fender-offline

    Some things are able to bury themselves into Windows so deep that a normal scanner can't catch them. A pre-Windows scanner scans the drive before Windows loads.

    WDO takes a while; be patient.

  5. The Following User Says Thank You to mrjimphelps For This Useful Post:

    speedball (2014-01-09)

  6. #5
    5 Star Lounger
    Join Date
    Mar 2010
    Location
    east coast
    Posts
    701
    Thanks
    89
    Thanked 8 Times in 8 Posts
    UPDATE

    today axe8sharedexpat.dll
    tried to phone home and got blocked by security software

    a search could not find this program on my pc at all

    this one i did find and is allegedly for adobe software
    BUT
    i also found a reference on the net to virus scumware etc faking this dll as part of their dirty work:

    Note: axe8sharedexpat.dll may be disguised by spyware, malware, virus and Trojan, if you find you didn't install that software, it must be virus. The virus may slow down computer performance, system crashes, data loss and privacy leakiness. We recommend you to run a Free security axe8sharedexpat.dll scan and remove axe8sharedexpat.dll Virus in your computer.

    afaik i never installed this program
    and the fact that both of these dlls are not to be found on my pc makes me think some deep burrowing scumware is trying to have its way with my pc

  7. #6
    Super Moderator
    Join Date
    Jun 2011
    Location
    New England
    Posts
    4,745
    Thanks
    171
    Thanked 649 Times in 572 Posts
    Quote Originally Posted by speedball View Post
    today axe8sharedexpat.dll
    tried to phone home and got blocked by security software

    a search could not find this program on my pc at all

    afaik i never installed this program
    It's a part of Adobe Reader. Is that installed?


    Quote Originally Posted by speedball View Post
    and the fact that both of these dlls are not to be found on my pc makes me think some deep burrowing scumware is trying to have its way with my pc
    Is Malwarebytes FileASSASSIN installed?


    Bruce

  8. #7
    Super Moderator satrow's Avatar
    Join Date
    Dec 2009
    Location
    Cardiff, UK
    Posts
    4,485
    Thanks
    283
    Thanked 573 Times in 477 Posts
    axe8sharedexpat.dll is also part of most, if not all, versions of Photoshop, Adobe Bridge, etc.

  9. #8
    5 Star Lounger
    Join Date
    Mar 2010
    Location
    east coast
    Posts
    701
    Thanks
    89
    Thanked 8 Times in 8 Posts
    okay

    adobe reader is installed
    and mbam pro is installed

    but why would a dll phone home?

    i can see the ap updating, and mbam asks me about doing that
    but just forcing an outbound connection is not friendly

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •