Jump to content

Vundo File Being missed by Malwarebytes

Recommended Posts

rmupnyle.dll located in C:\WINDOWS\system32 is being missed by Malware Bytes 1.25 Def. 1069 on a quick scan, VundoFix v7.0.6 Picked it up. Is there any other info you need on making sure this is picked up on a quick scan? It did get rid of everything else though. ;)


Link to post
Share on other sites

Jean , on these have them zip and attach so it does not get into the main pile , I can process way faster here .

Those defs are a little old (2 versions) , I might have added it in within those two .

Try again with current defs and if still missed , zip and attach here , Ill get right on it .

One thing to keep in mind , if a vundo infection is not live/real (just a file sitting in system32 , not in memory and no load point) half of our weapons are bypassed . If this where the case the dll would be dead as it would have no ability to enter memory .

If this is from a live infection I need to know the load point as well , a reg export would be even better .

Thanks. .

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.