UA000080.DLL - threat or false positive?

[B-boy/StyLe/]

I can't found information about this trojan (only in PrevxCSI)

Malwarebytes' Anti-Malware 1.18

Database version: 872

9:16:16 PM 6/20/2008

mbam-log-6-20-2008 (21-16-16).txt

Scan type: Quick Scan

Objects scanned: 34830

Time elapsed: 1 minute(s), 25 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\WINDOWS\UA000080.DLL (Trojan.Agent) -> Quarantined and deleted successfully.

[nosirrah]

This was caused by a heu for some game spyware I keep seeing in the wild .

Turns out I can adjust the heu and both keep it doing what it should be but also miss this file .

Next update will have this solved .

[B-boy/StyLe/]

Thanks for your fast reply.

Respect !

[nosirrah]

Update up , let me know if its gone .

[B-boy/StyLe/]

Update up , let me know if its gone .

Yep => completely gone

Malwarebytes' Anti-Malware 1.18

Database version: 873

1:46:50 AM 6/21/2008

mbam-log-6-21-2008 (01-46-50).txt

Scan type: Full Scan (C:\|D:\|E:\|F:\|)

Objects scanned: 137119

Time elapsed: 16 minute(s), 18 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 1

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\StartMenuLogOff (Hijack.StartMenu) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

[nosirrah]

Thanks for the help .

[B-boy/StyLe/]

Thanks for the help .

Always.

Thanks for all your hard work on the new release.