1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Invulnerability From twaintec.dll

Discussion in 'Security and Privacy' started by Gizmoguy, 2004/05/15.

Thread Status:
Not open for further replies.
  1. 2004/05/15
    Gizmoguy

    Gizmoguy Inactive Thread Starter

    Joined:
    2004/05/15
    Messages:
    2
    Likes Received:
    0
    I have manually (without AV) looked at my PC for viruses and I found a nasty little bugger called twaintec.dll.It is responsible for killing Num Lock at the login screen and terminating alot of AVs and applications on XP.To get complete invulnerability,paste this into AUTOEXEC.BAT.

    c:
    cd windows
    del twaintec.dll

    It deletes the DLL before it's loaded into memory,and if you leave AUTOEXEC.BAT like that it will stop it from ever appearing.As far as I know,it only infects XP machines,but I would recommend everyone to do this.
     
  2. 2004/05/15
    Lonny Jones

    Lonny Jones Inactive Alumni

    Joined:
    2002/12/16
    Messages:
    2,252
    Likes Received:
    0
    {000020DD-C72E-4113-AF77-DD56626C6C42} X BHO twaintec.dll TwainTech adware http://www.sysinfo.org/bholist.php?filter=twaintec.dll&count=&type=

    I dont think a one simple adware dll could be resposible for all those symtom's

    You could post a Hijackthis log, provided anti adware/spyware programs have already been ran , Adaware and SpyBot and yo have rebooted since then.
    Actualy SpywareBlaster will protect you from it installing in the first place


    Post a log from HijackThis so our forum members can see
    what's going on. The current version is 1.97.7 [created by merijn bellekom]
    Most of what it lists will be harmless, even essential,DON'T fix anything yet please.

    First make a new folder, for instance C:\Antispyware

    Get it here HijackThis Ver-1.97.7 choose save, NOT OPEN
    Save it to that new folder, double-click HijackThis.exe,
    and hit "Scan ". When the scan is finished, the "Scan" button will change into a "Save Log" button. Press that, It will load it in Notepad, and copy its contents here.
    Close hijackthis and notepad.
     

  3. to hide this advert.

  4. 2004/05/15
    Newt

    Newt Inactive

    Joined:
    2002/01/07
    Messages:
    10,974
    Likes Received:
    2
    Interesting idea Gizmoguy.

    But given that XP does not uses autoexec.bat at startup (and usually doesn't even have such a file, autoexec.nt normally does the job if a 16bit app needs the file in order to operate) I fail to see how it will help you very much.

    You can create an autoexec.bat file and you can put what you want inside of it but you cannot make any NT system use it as part of their startup routine.

    Twain-tech is certainly spyware - BHO to be specific - and something you'd be better off without and the method you posted might work on 9X/ME systems.

    It is not a virus though and no AV app I'm aware of would find it. Nor would it mess with your AV app.
     
    Newt,
    #3
  5. 2004/05/16
    Gizmoguy

    Gizmoguy Inactive Thread Starter

    Joined:
    2004/05/15
    Messages:
    2
    Likes Received:
    0
    ReInvulnerability From twaintec.dll

    Actually,XP doesn't defaultly use AUTOEXEC.BAT,but once data has been entered in it,XP executes the commands.
     
  6. 2004/05/16
    TonyT

    TonyT SuperGeek Staff

    Joined:
    2002/01/18
    Messages:
    9,072
    Likes Received:
    400
    To use such code in XP, it would be better to convert it into a barch file or a cmd file. It could then be used when windows is running with pauses in the code. All you would need to do is start the batch file, use task manager to kil explorer.exe, complete the batch file and then use task manager to restart explorer.exe.

    However, antispyware apps can remove this dll and also the culprit app that installed it in the first place.
     
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.