AppCertDlls
Archived: 2026-04-05 16:48:00 UTC
The Wayback Machine -
https://web.archive.org/web/20130401232752/http://forum.sysinternals.com:80/appcertdlls_topic12546.html
Author
  
 Topic Search   Topic Options
EP_X0FF
Senior Member
Joined: 08 March 2006
Location: Russian Federation
Status: Offline
Points: 4753
 Post Options    Thanks(0)    Quote   Reply Topic: AppCertDlls
    Posted: 24 October 2007 at 5:03am
Why Autoruns does not scans this key?
\Registry\MACHINE\System\CurrentControlSet\Control\Session Manager\AppCertDlls
Edited by EP_X0FF - 24 October 2007 at 5:03am
 TonyKlein
Groupie
Joined: 13 June 2005
Location: Netherlands
Status: Offline
Points: 62
https://web.archive.org/web/20130401232752/https://forum.sysinternals.com/appcertdlls_topic12546.html
Page 1 of 4

Post Options    Thanks(0)    Quote   Reply Posted: 25 July 2010 at 10:48am
I thought I'd bump this up,  as more and more malware has been observed to write to this key:
http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?
Name=TrojanSpy%3AWin32%2FUrsnif.gen!I
http://www.avira.com/en/threats/section/fulldetails/id_vir/5324/tr_spy.browse.a.html
http://www.threatexpert.com/report.aspx?md5=aa0ce626ac39dbdb728b82cbf4328907
 bootsect
Senior Member
Joined: 24 December 2009
Status: Offline
https://web.archive.org/web/20130401232752/https://forum.sysinternals.com/appcertdlls_topic12546.html
Page 2 of 4

Points: 747
 Post Options    Thanks(0)    Quote   Reply Posted: 26 July 2010 at 11:47am
Nobody cares I guess.
 TonyKlein
Groupie
Joined: 13 June 2005
Location: Netherlands
Status: Offline
Points: 62
 Post Options    Thanks(0)    Quote   Reply Posted: 02 August 2010 at 12:17pm
Some kind of answer would be nice, though...
 Mark
Admin Group
Joined: 04 June 2005
Location: United States
Status: Offline
Points: 515
 Post Options    Thanks(0)    Quote   Reply Posted: 03 August 2010 at 5:20am
Good suggestion, thanks.
 TonyKlein
Groupie
Joined: 13 June 2005
Location: Netherlands
Status: Offline
Points: 62
https://web.archive.org/web/20130401232752/https://forum.sysinternals.com/appcertdlls_topic12546.html
Page 3 of 4

Post Options    Thanks(0)    Quote   Reply Posted: 03 August 2010 at 7:39am
Thank you,  Mark 
 fix_it
Newbie
Joined: 16 November 2012
Status: Offline
Points: 1
 Post Options    Thanks(0)    Quote   Reply Posted: 16 November 2012 at 2:01am
Make it work already! It is broken from the beginning.
See this
http://www.kernelmode.info/forum/viewtopic.php?p=16552#p16552
&
http://blogs.comodo.com/pc-security/computer-protection/trojware-win32-trojanspy-volisk-a/
Source: https://web.archive.org/web/20130401232752/https://forum.sysinternals.com/appcertdlls_topic12546.html
https://web.archive.org/web/20130401232752/https://forum.sysinternals.com/appcertdlls_topic12546.html
Page 4 of 4