MBAM detection

[franck65]

Hello.

(Sorry for my English)

I help on a forum for disinfection. I encounter the problem of pop-up style: coolfind200309.com (coolfind).

Crossing MBAM, it deletes these files: Module (s) infected memory (s): C: \ WINDOWS \ system32 \ dll32.dll (Backdoor.Bot) -> Delete on reboot. and File (s) infected (s):

C: \ WINDOWS \ system32 \ dll32.dll (Backdoor.Bot) -> Delete on reboot.

After reboot, users no longer have access to the Internet.

It happened to me several times today, that's what amazes me.

Thank you for any information.

Bonne continuation.

[franck65]

UP !

Nobody knows if I do a back-up with MBAM or download the missing dll?

The specific question is: dll32.dll is the result of an infection?

Or this dll housed infection, which need to replace it?

Thanks for your job.

Bonne suite.

[GT500]

According to Previx, this is a worm.

[franck65]

Hi!

Thanks for the reply.

What I do not understand is that you can then download the free ...

-> http://nodevice.fr/dll/download.html

Furthermore, its removal causes no internet connection.

In short, I expect more on the various discussions, because I'm waiting. I'll tell you later.

Thank you and goodbye.

+ +

[GT500]

Restore the file from your quarantine (if you have not already), follow these instructions to run a scan in developer mode, ZIP both the DLL file in question and the developer mode scan log, and upload it to our UploadNET. Our research team will be happy to take a look at it.

[franck65]

Thanks GT500 !

Bye.