neoqaz2.dll. What is it?

Discussion & Support for xplorer² professional

Moderators: fgagnon, nikos, Site Mods

User avatar
CrossX
Bronze Member
Bronze Member
Posts: 128
Joined: 2009 Dec 05, 21:13

neoqaz2.dll. What is it?

Post by CrossX »

I have COMODO Firewall, and whenever I opex xplorer2 the COMODO FW "Defense+" section always alerts me about a neoqaz2.dll file that is "unrecognized".

If I tell it to consider neoqaz2.dll a "trusted file" the next time I reopen xplorer2 we are at the same starting point with the same alert.
Infact I see that neoqaz2.dll (8 bytes) is modified everytime xpl2 is restarted, and so my poor COMODO always sees a new file.

Could you tell me if neoqaz2 can be deleted, and why it has this behaviour?

Thanks  :wink:
Robert2
Gold Member
Gold Member
Posts: 671
Joined: 2004 Jun 17, 15:39

Post by Robert2 »

Hi,
Here is from http://www.greatis.com/appdata/d/n/neoqaz2.dll.htm:
neoqaz2.dll - Dangerous
We suggest you to remove neoqaz2.dll from your computer as soon as possible.
Neoqaz2.dll is Trojan/Backdoor.
Kill the file neoqaz2.dll and remove neoqaz2.dll from Windows startup.
HTH.
User avatar
CrossX
Bronze Member
Bronze Member
Posts: 128
Joined: 2009 Dec 05, 21:13

Post by CrossX »

h**p://www.checkfilename.com/view-details/Xplo ... fessional/
it seems it is created by xplorer2.

So who is wrong and who is right?  :wink:
Robert2
Gold Member
Gold Member
Posts: 671
Joined: 2004 Jun 17, 15:39

Post by Robert2 »

I have xplorer² Pro installed on my Windows XP SP3 system. There is no “NEOQAZ2.DLL” on my system.
User avatar
fgagnon
Site Admin
Site Admin
Posts: 3737
Joined: 2003 Sep 08, 19:56
Location: Springfield

Post by fgagnon »

My x2 Pro won't run without neoquaz2.dll so I would say it is required.

Nikos would have the authoritative word on it.

FYI - I uploaded it to http://www.virustotal.com/ where it was scanned by 44 different AV tools (including Comodo v6134) and all reported no issue with the file.
So I seriously doubt it being a trojan or any other form of mal-ware, and suspect that the folks at http://www.greatis.com are misinformed.
Robert2 wrote:I have xplorer² Pro installed on my Windows XP SP3 system. There is no “NEOQAZ2.DLL” on my system.
It's a hidden system file in the C:\WINDOWS directory on my XP/sp3 system, and likely on yours. (ditto on my w7 systems.) ;)
Robert2
Gold Member
Gold Member
Posts: 671
Joined: 2004 Jun 17, 15:39

Post by Robert2 »

I have “show hidden files and folders” on in both Windows Explorer and xplorer² Pro. There is no “neoquaz2.dll” under C:\Windows, or C:\ for that matter. What gives?
Gandolf
Gold Member
Gold Member
Posts: 466
Joined: 2004 Jun 12, 10:47

Post by Gandolf »

My copy of neoqaz2.dll is dated 30-11-2004 15:41:29 and my virus scanner has never questioned it. Like fgagnon I just scanned it with virustotal and all is clear. Over to Nikos I think.
User avatar
FrizzleFry
Platinum Member
Platinum Member
Posts: 1241
Joined: 2005 Oct 16, 19:09

Post by FrizzleFry »

I found it in C:\Windows...

neoqaz2.dll 108 B RHSA----- 10/12/2008 10:12:12 P

I ran it through Virus Total also... nothing found...

If it is required by x2 I'm going to guess it has something to do with registration.
User avatar
nikos
Site Admin
Site Admin
Posts: 15771
Joined: 2002 Feb 07, 15:57
Location: UK
Contact:

Post by nikos »

it's a required file and that's all i'm going to say :P
how much risk could a few byte 'dll' be?
Kilmatead
Platinum Member
Platinum Member
Posts: 4573
Joined: 2008 Sep 30, 06:52
Location: Dublin

Post by Kilmatead »

No doubt Nikos thoroughly enjoys us all having a good public discussion about rooting around in his DRM, but to the original question at hand: I cannot reproduce the OP's problem using Comodo (x64) - mine seems to happily ignore said file.  Are your settings aligned to "Safe" or "Paranoid"?  (No joke that, for those who don't use it - there really is a "Paranoid" setting. :wink:)

That said, I've found Comodo to be slightly less than predictable - for instance it seems to interfere with Listary's hooks (even when clearly trusted) for no apparent reason, rendering it useless, which I find rather annoying. :shrug:
nikos wrote:...how much risk could a few byte 'dll' be?
Given MS's recent public kerfluffle regarding DLL injections, people have become more sensitive to every little byte, here and there...
User avatar
CrossX
Bronze Member
Bronze Member
Posts: 128
Joined: 2009 Dec 05, 21:13

Post by CrossX »

@Kilmatead
My COMODO Defense+ setting is "Clean PC Mode" (I am using the latest 32 bit version 5.0.162636.1135)
Anyway it is only that I see neoqaz2.dll among the "unrecognized files" and I wondered if I could delete it.
Not a problem at all

Thanks nikos  :wink:
Kilmatead
Platinum Member
Platinum Member
Posts: 4573
Joined: 2008 Sep 30, 06:52
Location: Dublin

Post by Kilmatead »

Ah, fair enough - I thought you were getting endless alerts relating to it, requiring attention each time.

I kind of stopped looking at the Unrecognised Files list after awhile, as it just tends to get overpopulated with every bloody temporary installer/extracted file known to mankind.  Which is, to be fair, its raison d'être - but it can be overkill.

Incidentally, neoqaz2.dll doesn't even appear in my list. :shrug:
Tuxman
Platinum Member
Platinum Member
Posts: 1610
Joined: 2009 Aug 19, 07:49

Post by Tuxman »

Now I actually wonder if it would be worth the effort to run some analytics over this DLL just to find out what it does ...
Tux. ; tuxproject.de
registered xplorer² pro user since Oct 2009, ultimated in Mar 2012
Kilmatead
Platinum Member
Platinum Member
Posts: 4573
Joined: 2008 Sep 30, 06:52
Location: Dublin

Post by Kilmatead »

What kind of funky-do heuristics might you get from an inert 108 byte library?

It's more likely to say, "Leave me alone, I don't want to get up for school today, the other kids just tease me." :wink:
Tuxman
Platinum Member
Platinum Member
Posts: 1610
Joined: 2009 Aug 19, 07:49

Post by Tuxman »

108 bytes, but 108 mysterious bytes!
Tux. ; tuxproject.de
registered xplorer² pro user since Oct 2009, ultimated in Mar 2012
Post Reply