Search the Community

Hi there I have just registered on this forum hoping to find a solution to an annoying problem. When running a scan, mbam finds an extension.mismatch threat. I managed to delete is successfully but started experiencing annoying problems after rebooting. I get an error message saying the specific program (ccleaner, opera, windows live mail...at random) is an illegal installation copy and the error refers to ntshrui.dll located in the system32 folder. The only way I managed to get rid off the error messages was by restoring a system image I made a month ago. Unfortunately, the trojan (which I suspect it to be) is already in that system image. I no longer get the error message since I haven't allowed mbam to delete it yet. Still, it is not a solution and I would love to get rid off it without having to perform a clean installation. I have created a log file (it's in Dutch since I live in Belgium). I have translated to reference if that helps. www.malwarebytes.org Databaseversie: v2012.04.23.01 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 9.0.8112.16421 Filip :: METHOS [administrator] Realtime bescherming: Ingeschakeld 23/04/2012 13:36:08 mbam-log-2012-04-23 (13-51-19).txt Scantype: Volledige scan Ingeschakelde scanopties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM Uitgeschakelde scanopties: P2P Objecten gescand: 46886 Verstreken tijd: 2 minuut/minuten, 43 seconde(n) [beëindigd] Geheugenprocessen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registersleutels gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registerwaarden gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registerdata gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Mappen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Files detected: 1 c:\dell\drivers\r140135\3100_216\win64\rightarrow.gif (Extension.Mismatch) -> No action taken. (einde) When going to that specific location, I don't see rightarrow.gif at all (it's also not a hidden file) Any kind of help would be very much appreciated. Methos