local64spl.dll Malware??

Question

I discovered hidden dll files called local64spl  (It also had local64spl.dll.ini files) in every folder that was in the root of E:.

defender flagged it as malware and and quarantined it and I made it delete it. The odd thing though is that it only detected those files WHEN I saw them, so that's odd.

another thing to note that there are hidden folders  that also have "local64spl.dll.ini", the hidden folders mimic the names of regular folders but with a underscore (Example: Normal folder's name: "Folder", the local64 hidden folder name: "Folder_ ")

contents of the ini file
[Fast]

FastType=4 (or 44, or 2, or 22)

The ini files that were in NORMAL folders had a number (ex: 4) and the hidden folders mimicking their name had twice the number (ex:44).

LMAO I JUST DELETED THE ENTIRE POST WHILE I WAS WRITING, THANK GOD FOR CTRL Z

Answer 1

Hey there Helpin!

My name is Miguel Ángel and I'm an independent advisor, also a Microsoft user just like you! I'll try to help you today with your issue.

Malwares, and trojans therefore, are known to hide themselves under system files, but that's not a problem for our Windows Defender. If it was flagged as malware, just remove it via Windows Defender and it won't disturb anymore. However, run another check one hour after to make sure the virus hasn't reproduced himself.

I myself would give a try to Hitman antivirus and check if it detects anything with local64spl name, just to make sure there's no cloned infectious process or anything.

Download this Microsoft Malicious Software Removal tool, and tell me how it goes: https://www.microsoft.com/en-gb/download/detail...

It'd be also helpful if you could specify where those files are, and probably attach a photo with all of them so as to take a look. The information in Properties can also help you (the date of creation, for example).

I'll wait for your reply! Don't worry, everything will be okay.

Hugs,

Miguel Ángel :)