topbanner_forum
  *

avatar image

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  • Tuesday March 19, 2024, 12:19 am
  • Proudly celebrating 15+ years online.
  • Donate now to become a lifetime supporting member of the site and get a non-expiring license key for all of our programs.
  • donate

Author Topic: Help: What's afaf1_s.dll  (Read 6733 times)

PhilB66

  • Supporting Member
  • Joined in 2007
  • **
  • Posts: 1,522
    • View Profile
    • Donate to Member
Help: What's afaf1_s.dll
« on: April 28, 2009, 11:10 PM »
Please help identify afaf1_s.dll (in \WINDOWS\system32\ folder) and what it does. Google search yields nothing.

Curt

  • Supporting Member
  • Joined in 2006
  • **
  • Posts: 7,566
    • View Profile
    • Donate to Member
Re: Help: What's afaf1_s.dll
« Reply #1 on: April 29, 2009, 02:18 AM »
1) check the various dates it can tell, about installation, and 2) perform a search for changes made at that time, and 3) Windows will reveal what you were doing at that time, so you'll get a hint from where the bastard came.

mouser

  • First Author
  • Administrator
  • Joined in 2005
  • *****
  • Posts: 40,896
    • View Profile
    • Mouser's Software Zone on DonationCoder.com
    • Read more about this member.
    • Donate to Member
Re: Help: What's afaf1_s.dll
« Reply #2 on: April 29, 2009, 02:23 AM »
dont have it on my pc.  perhaps you could zip and attach it and one of the more reverse-engineer skilled people on the forum could have a look at it?

PhilB66

  • Supporting Member
  • Joined in 2007
  • **
  • Posts: 1,522
    • View Profile
    • Donate to Member
Re: Help: What's afaf1_s.dll
« Reply #3 on: April 29, 2009, 03:27 AM »
Thanks Curt and mouser, I have already tried that...  >:(

It's listed as a hidden system file but when I try to rip the .dll I get "file is not EXE or DLL" message. I opened it with notepad but all I could see is some strange characters *qò and it's only 5 bytes in size.

I attach the file. Maybe someone could tell what it is.


lanux128

  • Global Moderator
  • Joined in 2005
  • *****
  • Posts: 6,277
    • View Profile
    • Donate to Member
Re: Help: What's afaf1_s.dll
« Reply #4 on: April 29, 2009, 03:31 AM »
it's also worth a try to upload the file to virustotal or jotti to have it scanned..

mouser

  • First Author
  • Administrator
  • Joined in 2005
  • *****
  • Posts: 40,896
    • View Profile
    • Mouser's Software Zone on DonationCoder.com
    • Read more about this member.
    • Donate to Member
Re: Help: What's afaf1_s.dll
« Reply #5 on: April 29, 2009, 03:33 AM »
it's only 5 bytes big?  seems like it might be a copy protection data file masquerading as a dll -- i.e. a program you installed might have created it to keep track of when the trial period started, etc.

PhilB66

  • Supporting Member
  • Joined in 2007
  • **
  • Posts: 1,522
    • View Profile
    • Donate to Member
Re: Help: What's afaf1_s.dll
« Reply #6 on: April 29, 2009, 03:38 AM »
Done that too... nada ( That was in response to lanux128 suggestion)

PhilB66

  • Supporting Member
  • Joined in 2007
  • **
  • Posts: 1,522
    • View Profile
    • Donate to Member
Re: Help: What's afaf1_s.dll
« Reply #7 on: April 29, 2009, 03:43 AM »
it's only 5 bytes big?  seems like it might be a copy protection data file masquerading as a dll -- i.e. a program you installed might have created it to keep track of when the trial period started, etc.

Thanks mouser, that might be it but how could I tell to which program it belongs (and wtf it is cluttering system32 folder  >:(

lanux128

  • Global Moderator
  • Joined in 2005
  • *****
  • Posts: 6,277
    • View Profile
    • Donate to Member
Re: Help: What's afaf1_s.dll
« Reply #8 on: April 29, 2009, 03:44 AM »
as mouser mentioned it's too small to be a DLL, it's more likely to be a beacon file.. and it's hard to say what might have dropped it into the system folder (recent downloads, visited websites, installed programs).. delete the file and retrace what you were doing earlier to see if it comes back..

PhilB66

  • Supporting Member
  • Joined in 2007
  • **
  • Posts: 1,522
    • View Profile
    • Donate to Member
Re: Help: What's afaf1_s.dll
« Reply #9 on: April 29, 2009, 03:51 AM »
Thanks lanux128. Already renamed the file to .bak. See if I manage to find out which program created the file.

f0dder

  • Charter Honorary Member
  • Joined in 2005
  • ***
  • Posts: 9,153
  • [Well, THAT escalated quickly!]
    • View Profile
    • f0dder's place
    • Read more about this member.
    • Donate to Member
Re: Help: What's afaf1_s.dll
« Reply #10 on: April 29, 2009, 06:55 AM »
Grab sysinternals' Process Monitor (not * Explorer), set a filter for the file name... and keep PM running for a while.
- carpe noctem