Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Darkstorm and winmm.dll
#1
Hello,

Lately i tried to use zonalarm firewall who reported winmm.dll inside Darkstorm folder as a root kit virus.
I saw 2 threads on the board reporting the same issue but no further discussion about it.

I did some googling and it appears that winmm.dll is really a trojan downloader, it is not a false positive.
I have deleted winmm.dll and Darkstrom is still working, so...

unless someone here know what exactly this dll is doing (not just assuming), i guess it is highly recommanded for all to delete this dll from darkstorm.

One more curious thing, i couldnt open this file with anything, i get various weird error messages.

is there here any expert who can desasemble it and look inside it ?

Guests cannot see links in the messages. Please register to forum by clicking here to see links.
Reply
#2
Guests cannot see links in the messages. Please register to forum by clicking here to see links.

It's actually an executable that is your joystick driver in case you use a joystick to play SL.
It's safe.
Reply
#3
(11-18-2018, 03:54 AM)Benjamin Wrote: Guests cannot see links in the messages. Please register to forum by clicking here to see links.Guests cannot see links in the messages. Please register to forum by clicking here to see links.

It's actually an executable that is your joystick driver in case you use a joystick to play SL.
It's safe.

I think this make reference to the real winmm.dll that is located in the system c:\windows\WinSxS\(...)

The one in darkstorm is maybe a cover, and the curious thing is i cannot open it, i wanted to check it inside a dll explorer, but no way to open it, even as an administrator, it says operation not allowed !

and firestorm have one, but this one is not reported as rootkit virus, curious too, no ? (and i can open this one)

did you try to open it Benjamin ?
Reply
#4
I submitted mine to virustotal.com, and it returned zero detections. Maybe submit yours and see too, and if virustotal says yours is bad, and if so, figure out how you got a different file... unpack the installer manually and see if the winmm in it, and your one, are identical, etc. Far as opening it with inspection tools try booting in safe mode or even a winPE boot cd like Bart's or somesuch, to be sure it isn't already loaded somehow. It's not only a joystick driver, it also bridges between the media controls and the Windows audio subsystem, but if it's not present the system one you mentioned will be loaded if it's compatible.
Fractured Crystal: You know ban evasion isn’t in the TOS, right?
---
SL banned? Search 'technitium', 'MAC changer', 'serial changer', 'ban evasion', 'VPN', 'IP ban', 'hardware ban'.
---
As a Gemini I can argue any side of everything with equal conviction.  You have been warned.
---
New here?  Click: Guests cannot see links in the messages. Please register to forum by clicking here to see links.
Reply
#5
You could do what I do and run DS in Sandboxie
Reply
#6
sounds stinky af :/ why somebody put it there?
Reply


Possibly Related Threads...
Thread Author Replies Views Last Post
  [Viewer] DarkStorm v3.1.0 (windows/linux) wish 958 230,757 11-24-2018, 09:02 PM
Last Post: IMPERIALSIM
  I need help with darkstorm, empty contents. Levitatin 1 134 11-15-2018, 08:53 AM
Last Post: weeds1977
  i need help with darkstorm. Levitatin 7 195 11-15-2018, 02:36 AM
Last Post: Emma Frost
  Can LL ban all my accounts for using Darkstorm? tripaloska 5 362 11-14-2018, 07:18 AM
Last Post: xXravenXx
  problems with Darkstorm 3.1.0 merlina 11 1,846 10-25-2018, 09:56 AM
Last Post: Slayer0
Star [Viewer] DarkStorm v2.8 SSB [windows/linux/macosx] wish 1,037 124,020 06-29-2018, 12:05 PM
Last Post: cuckolder
Wink New darkstorm ? Sloane90 4 1,386 06-20-2018, 06:50 AM
Last Post: SkullBomb
  problems with Darkstorm 3.1.0 04/06/2018 tukocarlos 2 691 06-05-2018, 02:45 AM
Last Post: xVibex
  DarkStorm randoz 5 885 05-06-2018, 01:11 AM
Last Post: randoz
Star OLD [Viewer] DarkStorm v3.0.2 Windows and Linux wish 2,143 297,228 12-04-2017, 11:41 AM
Last Post: Bill Woodland



Users browsing this thread: 1 Guest(s)