gerdrah Posted February 11, 2009 ID:55574 Share Posted February 11, 2009 Here is the report of MBAMMalwarebytes' Anti-Malware 1.33Version de la base de donn Link to post Share on other sites More sharing options...
gerdrah Posted February 12, 2009 Author ID:55926 Share Posted February 12, 2009 I have scanned ENCAPI32.DLL to virustotal.com and it was 100% clean.The adsl task bar has always been there for my internet connection.***********************************************************Malwarebytes' Anti-Malware 1.34Version de la base de donn Link to post Share on other sites More sharing options...
Staff nosirrah Posted February 12, 2009 Staff ID:55955 Share Posted February 12, 2009 This will be fixed in the next update . Link to post Share on other sites More sharing options...
cfive Posted February 12, 2009 ID:55978 Share Posted February 12, 2009 Are you guys absolutely sure encapi32.dll is safe? MBAM also picked it up for me on the ninth under suspicious circumstances. First off, there's a file called encapi32.dll and there's a file called encapi.dll; MBAM only picked up encapi32.dll . Second, most imitators have the number 32 at the end of their name. Finally, before MBAM caught encapi32.dll, I kept getting a suspicious dialogue on startup saying a program wanted to install something on my computer; the program claimed to be "Microsoft Windows installer" the fact that the letter "I" in "Installer" was lowercase was suspicious to me. Also, it claimed it wanted to install something involving something like HKEY_ROOT or HKEY_LOCAL and a bunch of random characters followed. Also, in the installer, I saw the words "REALLY SURPRESS" which was also suspicious. Also when I removed encapi32.dll, nothing bad seemed to happen as a result, meaning the file wasn't critical to my computer. I think encapi32.dll is malicious.(P.S. What does a trojan.agent do?) Link to post Share on other sites More sharing options...
Staff nosirrah Posted February 12, 2009 Staff ID:55981 Share Posted February 12, 2009 The notify load one is malware the run load one is safe (best I can tell at this point) .Still checking but in this case at least it is a FP . Link to post Share on other sites More sharing options...
zx81 Posted June 20, 2010 ID:270730 Share Posted June 20, 2010 Hello!Updated as of June 19, 2010 Malwarebytes found a "trojan tracur" in "encapi32.dll.What should I do ? Delete it or not?Has there been anything new since Feb 12 2009?Please answer soon. I haven't switched off my PC since yesterday morning, waiting in vain for a secure answer from various forums.Many thanks in advance.Zx81 Link to post Share on other sites More sharing options...
Staff nosirrah Posted June 22, 2010 Staff ID:272463 Share Posted June 22, 2010 Check again now and let me know if this is fixed. Link to post Share on other sites More sharing options...
zx81 Posted June 23, 2010 ID:272832 Share Posted June 23, 2010 Sorry! I couldn't wait any longer. I fixed the problem. Now, wait and see...Many thanks for your quick answer. Link to post Share on other sites More sharing options...
jpdenk Posted July 15, 2010 ID:284580 Share Posted July 15, 2010 Check again now and let me know if this is fixed.On June 22, I ran Malwarebytes and it flagged C:\WINDOWS\system32\ENCAPI32.DLL as being malicious. Here's the log:Files Infected:C:\sound32.dll (Trojan.Agent) -> Quarantined and deleted successfully.C:\WINDOWS\system32\ENCAPI32.DLL (Trojan.Tracur) -> Quarantined and deleted successfully.I was then prompted to restart the computer, which I did. On re-boot, I got a message that catastrophic failure of my C: drive was imminent. Coincidence? Or could I have done something by deleting those files? Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now