• Welcome to Overclockers Forums! Join us to reply in threads, receive reduced ads, and to customize your site experience!

Run DLL as an APP?

Overclockers is supported by our readers. When you click a link to make a purchase, we may earn a commission. Learn More.

DocClock aka MadClocker

Senior Member
Joined
Dec 19, 2000
Location
Stockton Cal, USA, Earth
Hello all,
I have a security program called "winpatrol" which monitors changes in registry settings and other crucial system folders...and here lately I have been getting a change in DLL's to "run as an APP" and the only info I get from it is that it wants to go to some URL.
There is no identifier to the program that wants the change, and I keep telling it NO when it asks if this change is authorized....Is this some kind of browser hijacking attempt, or worse some attempt to take control of my machine?
Whatever the program is, it is persistent as it has asked me three...uh now 4 times..it popped up while I was typing. I will post the image.
This really gets me, as usually I only have to say no once but this proggie is aggressive to say the least.
After posting this, I will do a search to see if this is a big problem.
Any and all suggestions are welcome,
Thanks in advance,
Doc
Just as I uploaded the pic, it did it again...man this is persistent!
 

Attachments

  • winpatrol1.GIF
    winpatrol1.GIF
    162.7 KB · Views: 54
I'd at least start a malwarebytes scan at bedtime. Usually if there's something malwarebytes will detect it, even if it can't properly remove it.
 
Well it looks like that the system is trying to run the same executables, only the original uses PATH variables (since the OS knows where your windows directory is) while the other is using a hardcoded path for the executables. Typically you'll see this with a lazy/idiot programmer not understanding how PATH variables work. It could be malware or it could a benign program that you installed. Perhaps running HijackTHIS is in order?
 
Back