Help - Search - Members - Calendar
Full Version: MBAM detection
Malwarebytes Forum > Malwarebytes' Anti-Malware Support > General Malwarebytes' Anti-Malware Forum
franck65
Hello.

(Sorry for my English)

I help on a forum for disinfection. I encounter the problem of pop-up style: coolfind200309.com (coolfind).

Crossing MBAM, it deletes these files: Module (s) infected memory (s): C: \ WINDOWS \ system32 \ dll32.dll (Backdoor.Bot) -> Delete on reboot. and File (s) infected (s):
C: \ WINDOWS \ system32 \ dll32.dll (Backdoor.Bot) -> Delete on reboot.

After reboot, users no longer have access to the Internet.

It happened to me several times today, that's what amazes me.

Thank you for any information.

Bonne continuation. cool.gif
franck65
UP !


Nobody knows if I do a back-up with MBAM or download the missing dll?

The specific question is: dll32.dll is the result of an infection?
Or this dll housed infection, which need to replace it?

Thanks for your job.

Bonne suite. wink.gif
GT500
According to Previx, this is a worm.
franck65
Hi!


Thanks for the reply.

What I do not understand is that you can then download the free ...

-> http://nodevice.fr/dll/download.html

Furthermore, its removal causes no internet connection.

In short, I expect more on the various discussions, because I'm waiting. I'll tell you later.

Thank you and goodbye.

+ +
GT500
Restore the file from your quarantine (if you have not already), follow these instructions to run a scan in developer mode, ZIP both the DLL file in question and the developer mode scan log, and upload it to our UploadNET. Our research team will be happy to take a look at it.
franck65
Thanks GT500 !

Bye.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.