DotnetFx.dll

Last Updated on Friday, 13 July 2012 14:23 Wednesday, 06 January 2010 17:47

Harmful - DLL

A file name dotnetfx.dll is created by several computer viruses that affect computers running on Microsoft windows operating systems. Their analysis reports are given below.

[In all the reports below
C:\Windows\System32\dotnetfx.dll
is a common file]

Files found - view
C:\Windows\chrome.exe
C:\Windows\System32\chrome.exe 

Files found - view
%CommonPrograms%\Startup\svhost.exe
C:\svhost.exe  

Files found - view
%CommonPrograms%\Startup\MSconfig.exe  

Files found - view
C:\Windows\System32\myrvc.exe  

Files found - view
C:\Windows\SSVICHOSST.exe
C:\Windows\System32\SSVICHOSST.exe 

Files found - view
%CommonPrograms%\Startup\SYSTEMIL2.EXE
C:\Documents.exe 
C:\Windows\SYSTEMIL.EXE

Files found - view
C:\Windows\dc.exe
C:\Windows\Help\Other.exe
C:\Windows\inf\Other.exe
C:\Windows\SVIQ.EXE
C:\Windows\system\Fun.exe
C:\Windows\System32\WinSit.exe 

Files found - view
C:\Windows\regsvr.exe
C:\Windows\System32\regsvr.exe  

Files found - view
C:\Windows\SCVHSOT.exe
C:\Windows\System32\blastclnnn.exe
C:\Windows\System32\SCVHSOT.exe   

Files found - view
C:\WindowsSSCVIIHOST.exe
C:\Windows\System32\blastclnnn.exe
C:\Windows\System32\SSCVIIHOST.exe 

Files found - view
C:\Autorun.inf
C:\Windows\Autorun.inf
C:\Windows\system\Autorun.inf
C:\Windows\System32\Autorun.inf  

Files found - view
%CommonPrograms%\Startup\MSconfig.exe 

Files found - view
%CommonPrograms%\Startup\my.exe
C:\Windows\reg.exe  

(Full path for the short folder names)

Among the file names above some legitimate file names are
MSconfig.exe -  is a system file present in C:\Windows\pcheclth\helpctr\binaries.
reg.exe -  is Registry console tool in C:\Windows\System32 folder
Chrome.exe - is Google's Chrome browser. It is found in  C:\Program Files\Google\Chrome\Application

There may be more files created by these virus programs. You can find them out. First locate and note down the "date of creation" of dotnetfx.dll  and after that, search the hard disk for other files created on that date or onward. See image.

Necessary steps to remove these virus programs

• To remove processes created by the virus program from the Task Manager.
• To search and delete files created by the virus program from the hard disk. Enable to view "hidden files and folders" before you search. Otherwise files created by the virus program inside the hidden folders will not be found.
• To remove obsolete registry keys using CCleaner.