General discussion

Locked

keylogger trojan

By PhilipNewton ·
Does anyone know what the file DLTIME.dll is used for and if I can reload this file? My friend's XP computer had a Norton error stating there was a keylogger-trojan virus on the DLTIME.dll file that could not be removed. I tried to fix the problem by deleting the c:\winnt\dltime.dll file but now get the following error message whenever they boot the computer:

svchost.exe - Unable To Locate Component
This application has failed to start because dltime.dll was not found. Re-installing the application may fix this problem.

I need to know if DLTIME.dll can be copied back or what program to re-install? Thanks!

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by diskaus In reply to keylogger trojan

If you are runnning Norton antivirus it should have come up with a warning "Virus Found" and stating what the virus , giving you a hyperlink to the remedy to the virus in question , go to this site <http://securityresponse.symantec.com/avcenter/venc/data/keylogger.trojan.html> this will tell you how you should go about removing it. as for what the file. Also you should also run spyware and adware ( collectivley known as "malware" programs to help in the fight against such viruses go to www.download.com, or www.tucows.com and do a search for "malware" and "Antivirus" there are several utilities to choose from , I use AdAware SE , Spysweeper and Norton System Works, ( Norton Systemworks also has other system utilities that help in the recovery of system crashes)
As for repairing the dammege already occured,Try reinstalling Service Pack 2

Good luck

Steve

Collapse -

by DouglasB In reply to keylogger trojan

Quite frequently when malware infects your computer, in addition to the file itself, it creates entries in your registery file. This is why, when you remove the bad file manually, you get error messages, because the registery still refers to the file. The suggestion above uses software to not only remove the offending file, but all references to it as well. You can edit the registery to attempt to locate the problem entry, but back up the registery first. If you are not comfortable editing the registery, DON'T!

Collapse -

by JamesRL In reply to keylogger trojan

DO NOT REINSTALL.

DLTIME.DLL is the virus. Something in the startup is trying to activate it. You cleaned the file, but not the process that tries to start up the file. I would run one of the anti-virus or spyware tools to try and see if there are registry settings or startup settings that call the file.

James

Collapse -

by JamesRL In reply to keylogger trojan

DO NOT REINSTALL.

DLTIME.DLL is the virus. Something in the startup is trying to activate it. You cleaned the file, but not the process that tries to start up the file. I would run one of the anti-virus or spyware tools to try and see if there are registry settings or startup settings that call the file.

James

Collapse -

by deepsand In reply to keylogger trojan

This appears to be the Backdoor.Tofger keylogging Trojan horse.

The error message from "svchost.exe" re. the missing .dll is the trojan telling you that it's missing its DLTIME.dll component. Merely deleting the .dll does not remove the entire suite of components which the trojan installed; nor does it undo its Registry changes.

See complete details, including removal procedures, see
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.tofger.html

Back to Windows Forum
5 total posts (Page 1 of 1)  

Related Discussions

Related Forums