MDIMENOY.dll

[richy22]

Sophos at work decided to pick this up randomly earlier as a trojan. I cant find any information about it?

Anyone know what this might be? Seemed to pop up whilst doing windows updates but it "might" be coincidental.

Google throughs up nothing about MDIMENOY.

 

[Longy]

Send the sample to Sophos or get your IT department to.

 

[richy22]

Aye already done/doing that.

Although now I have this everytime I boot

 

[Longy]

Because Sophos has quarantined it? until you know what it is you cant really authorise it.

Check your startup files in msconfig and see if anything fishy and check your services.msc.

 

[richy22]

Startup command is rndll32.exe "C:\\WINDOWS\mdimenoy.dll"

Location

HKCU\SOFTWARE\Microsoft\Wondows\CurrentVersion\Run

 

[Longy]

You should be able to safely untick it to stop it loading at start up. Doesn't sound windows related all, do you use any specialist software?

 

[richy22]

Specialist?

Altium, Solidworks, Write my own inhouse apps etc. This literally popped up during the 21 updates windows did this morning.

I like my IT guy though "Sophos Says it's a Trojan so it IS one".

 

[Adam.]

What folder did it come from?

 

[richy22]

C:Windows.

 

[Longy]

I like my IT guy though "Sophos Says it's a Trojan so it IS one".

True Sophos is usually pretty good with false positives however it can grab legitimate files now and again.

 

[iain187]

You should be able to safely untick it to stop it loading at start up. Doesn't sound windows related all, do you use any specialist software?

... And then see what stops working!

If anything at all...

 

[Longy]

... And then see what stops working!

If anything at all...

The file has been quarantined anyway this is just the reference to the file that ain't there anyway - so if something aint working you'd know already.

 

[iain187]

Yea, Nothing reported so far either. :-s

 

[richy22]

FFSnake Hiloti-d also found now