FP: C:\Windows\System32\cssdll32.dll (Trojan.Agent)

[Sergeant Sykes]

Malwarebytes' Anti-Malware 1.34

Database version: 1882

Windows 6.0.6001 Service Pack 1

2009-03-21 19:14:48

mbam-log-2009-03-21 (19-14-43).txt

Scan type: Quick Scan

Objects scanned: 54952

Time elapsed: 39 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\Windows\System32\cssdll32.dll (Trojan.Agent) -> No action taken. [3857535134303627615674796980888461849084857078201961688484697777201915697777]

[Fatdcuk]

Hi,

Can you please upload the target file to VirusTotal service and post back alink to the report generated.

http://www.virustotal.com/

Thanks in advance

[Sergeant Sykes]

Hi,

Can you please upload the target file to VirusTotal service and post back alink to the report generated.

http://www.virustotal.com/

Thanks in advance

There you go: http://www.virustotal.com/analisis/fc97bce...a1bfea071b08b1b

Hope this helps!

[Fatdcuk]

Thanks and yes is helping.

Google searching the MD5 flags it as a unique file.

Do you have any Comodo softwares installed ?

[Sergeant Sykes]

Thanks and yes is helping.

Google searching the MD5 flags it as a unique file.

Do you have any Comodo softwares installed ?

Yes, I have. I'm a COMODO addict hehe.

AFAIK this file belongs to COMODO Safe Surf which I have installed on my system.

Thanks

[Fatdcuk]

Right then it is F/p and hopefully will be addressed in an update shortly.

Apologies for any inconvenience caused and its is safe to tell MBAM to ignore the detection.

[Sergeant Sykes]

Right then it is F/p and hopefully will be addressed in an update shortly.

Apologies for any inconvenience caused and its is safe to tell MBAM to ignore the detection.

OK, then.

Many thanks for your help!

[Sailor]

OK, then.

Many thanks for your help!

I'm not sure it's a false positive. My dll32.dll file is 96K quarantined. And it keeps coming back. It may be similar to the dll32.exe backdoor in 2002. IMHO

Sailor

[nosirrah]

Let us know if this is fixed .

[Sergeant Sykes]

Let us know if this is fixed .

Yes it is fixed Thanks guys!