I found that once this dll was loaded after restart. A connection was made to a web site in Russia. I used Spybot 1.5 with the Teatimer loaded to help with this. I deleted the registry entry for this DLL , renamed the DLL, and denied the recreation of the new dll registry entry. Rebooted the PC and then used Hijackthis to remove the registry entry once and for all. Then deleted the renamed file. Norton, Smitfraud, Spybot 1.5, Adaware did not find this file as a threat. But the file properties pointed to Russia. Hope this helps.