See32.dll and see32z.dll

[Max]

I downloaded the free version of Webroot's SpySweeper and it found see32.dll
and see32z.dll, dated from February 2001.

As I understand it, these two files get installed with Iopus' STARR
keylogger. It also seems that the W32.Manifest.Trojan and the Troj/BVS-A
install them although they didn't appear until 2002 and 2003, respectively.
Also, according to Symantec:

"These files are commercial or publicly available programs:

* See32.dll is an SMTP email engine from MarshallSoft.
* See32u.dll and See32z.dll are parts of a distributable freeware, unzip and
zip .dll package."

I would like to know if these files can get installed by other software,
apart from STARR. They were not found in the Windows/System folder where
they are supposed to go; instead, they were in a folder which includes
jumbled up installations of PocoMail, Mailwasher and some train-controlling
game. At the time (Feb 2001) I used to scan the PC regularly for other
STARR files and for the programme's activity but I never found anything.

On the minus side, although the person I suspect does not have a very good
knowledge of computers so installing STARR in the stealth mode might have
been a challenge, they were definitely aware of the product at that time.

I'd appreciate your thoughts, thank you.

Max

[Chuck]

On Mon, 15 Sep 2003 13:49:12 +0100, "Max" <max@noemail.com> wrote:

>I downloaded the free version of Webroot's SpySweeper and it found see32.dll
>and see32z.dll, dated from February 2001.
>
>As I understand it, these two files get installed with Iopus' STARR
>keylogger. It also seems that the W32.Manifest.Trojan and the Troj/BVS-A
>install them although they didn't appear until 2002 and 2003, respectively.
>Also, according to Symantec:
>
>"These files are commercial or publicly available programs:
>
>* See32.dll is an SMTP email engine from MarshallSoft.
>* See32u.dll and See32z.dll are parts of a distributable freeware, unzip and
>zip .dll package."
>
>I would like to know if these files can get installed by other software,
>apart from STARR. They were not found in the Windows/System folder where
>they are supposed to go; instead, they were in a folder which includes
>jumbled up installations of PocoMail, Mailwasher and some train-controlling
>game. At the time (Feb 2001) I used to scan the PC regularly for other
>STARR files and for the programme's activity but I never found anything.
>
>On the minus side, although the person I suspect does not have a very good
>knowledge of computers so installing STARR in the stealth mode might have
>been a challenge, they were definitely aware of the product at that time.
>
>I'd appreciate your thoughts, thank you.
>
>Max

Not one person on this earth knows every malware out there. It is
very possible that those files were loaded by another malware product.

You would be well advised to run Spybot S&D and HijackThis, which
include better detection, plus removal advice and procedures. Start
from this article:
http://forums.spywareinfo.com/index.php?showtopic=5187


Chuck
cacrollthespam@yahoo.com
Spam sucks - PLEASE get rid of the spam before emailing me!
Trusted Computing? Right! http://www.againsttcpa.com/
WHAT IS THE CBDTPA? http://www.stoppoliceware.org/