[Ham-Computers] RE: ijl11.dll

[Hsu, Aaron (NBC Universal)]

Sounds like malware.  A quick Google shows that ijl11.dll belongs to an outdated JPEG compression library from Intel.  Legit versions should be in the %SystemRoot%\system32 folder.  But, there's also a keylogger that uses the same filename - this one is malware.

I don't have Win2K handy, but a website shows that the legit version of ijl11.dll should be 180,224 bytes (176KB) in size (v1.1.2).  If you right-click on the DLL, select "Properties", then click on the "Version" tab, you should get some general info about the DLL.  Most legit DLL's show some info in the "Other version info" section (such as Company and version info).  Most malware leave these blank.  The legit version of the Intel library should have Intel and v1.1.2 listed.

Check and verify the filesize and version of the DLL and make sure it's legit.


73,

  - Aaron, NN6O


-----Original Message-----
Sent: Tuesday, July 01, 2008 9:49 AM
Subject: [Ham-Computers] ijl11.dll

OS is Windows 2000.  I was doing some cleanup including cleaning out C:\temp and noticed a copy if ijl11.dll dated 6/5/2008 therein.  A search also found it, dated 10/19/2000 in C:\winnt\system32 from which I assume it has been there all along.  Does anyone have any idea about why an almost current dated copy might have been in \temp?

Robert Downs - Houston
<http://www.wa5cab.com> (Web Store)
MVPA 9480
<wa5cab at cs.com> (Primary email)
<wa5cab at comcast.net> (Backup email)