Dlltoolexe -
Where is the legitimate Dlltool.exe located? Typically, system files are in the C:\Windows\System32 directory. If the Dlltool.exe is elsewhere, like in the user's home directory, that's suspicious. Also, checking the file properties for a digital certificate from Microsoft would help confirm its legitimacy.