Possible Trojans - win64cert.dll and win32cert.dll

[Chirpy]

Hello all

I have noticed these 2 files (win64cert.dll and win32cert.dll) during my regular maintenance and have not been able to find any information other than they are possible trogan files.

They were first noticed on the 10/12 2012.

They are stored in the pc in a very unusual way such as;

C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Wincert

Does anyone have any experience with these files?

Your help would be greatly appreciated.

Thanks

 

[logicearth]

you have another problem...You have gone and changer file permissions? The only way you would get a directory structure like that is if you gone and altered permissions on various folders. The fact you can access "Application Data" is evident enough that the permissions have been altered which prevent this very thing.

As for the files in question, send them to virustotal.