APISLICE.DLL ?

[mountaintree16]

I just ran a quick scan on the Vista machine I keep an eye on and this is what I got. I didn't run it in developer's mode though, but I will shortly.

I think they're probably just leftovers from something that Avira missed, as I saw detections in the scan history, but I just wanted to see if they were okay to remove.

Thanks!

Malwarebytes' Anti-Malware 1.50.1.1100

www.malwarebytes.org

Database version: 5473

Windows 6.0.6002 Service Pack 2

Internet Explorer 8.0.6001.18999

1/6/2011 3:54:24 PM

mbam-log-2011-01-06 (15-54-08).txt

Scan type: Quick scan

Objects scanned: 169872

Time elapsed: 5 minute(s), 24 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 1

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\SYSTEM32\APISLICE.DLL (Trojan.Agent) -> Value: APISLICE.DLL -> No action taken.

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

c:\Windows\System32\APISlice.dll (Trojan.Agent) -> No action taken.

Edit: About to run in dev. mode, will post that log here when I am finished with it

[TeMerc]

I already sent this information to R&D internally, so maybe Bruce can just comment here.

[mountaintree16]

Thank you Tom!

Here is the dev. mode log:

Malwarebytes' Anti-Malware 1.50.1.1100

www.malwarebytes.org

Database version: 5473

Windows 6.0.6002 Service Pack 2

Internet Explorer 8.0.6001.18999

1/6/2011 4:06:28 PM

mbam-log-2011-01-06 (16-06-27).txt

Scan type: Quick scan

Objects scanned: 169948

Time elapsed: 3 minute(s), 47 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 1

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\SYSTEM32\APISLICE.DLL (Trojan.Agent) -> Value: APISLICE.DLL -> No action taken. [174a3cd9f20e13ed4a8c42ed40c538c8]

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

c:\Windows\System32\APISlice.dll (Trojan.Agent) -> No action taken. [174a3cd9f20e13ed4a8c42ed40c538c8]

[nosirrah]

Please zip and attach a copy of APISlice.dll to your next post.

[mountaintree16]

Bruce,

I zipped it into a folder but I can't seem to attach the folder and I can't upload the file itself.

The file is from Nov. of 2006, by the way.

[nosirrah]

There is no need for a folder at all, just zip and attach the file.

There is filtering that wont let you upload it unless it is a zip file.

[mountaintree16]

Only option I get is (see attached)

[TeMerc]

Only option I get is (see attached)

You can install any of the following free compression tools:

WinRAR

http://www.win-rar.com/downloadnow.html

7Zip

http://www.7-zip.org/download.html

WinZip:

http://download.cnet.com/WinZip/3000-2250_4-10003164.html

Once installed, you should be able to navigate to the file, right click and add it to an archive

[mountaintree16]

Thanks Tom.

Using that'll allow me to attach the file?

I'll try WinRar first, although I've used it before on this computer quite a while back, so I don't know if i can use it again. Otherwise I'll try WinZip.

[TeMerc]

Thanks Tom.

Using that'll allow me to attach the file?

Yes it will.

[Conor55]

Sorry if I seem a little off-topic here..

@MT16

CoD1 FTW!

[mountaintree16]

Yep, off topic. It's my brother's game, this is not my machine, I don't play it, I don't know how, least not yet.

Anyway,

Bruce and Tom,

I guess I don't know what to do, either that or I can't use it coz it was installed about a year ago.

Also got an error message when I chose "add to archive"

[mountaintree16]

Okay I downloaded 7zip and I chose add to archive and nothing happened, at least not that I can tell.

Back in a bit...

[mountaintree16]

YES!!!! I did the regular right-click, send to compressed (zipped) folder and this time it saved in WinRAR format and allowed me to attach :blink:

[nosirrah]

This will be fixed in the next update.

[mountaintree16]

Thank you so much Bruce!

I had a small hunch it was a FP but wanted to check here first. I am glad that I did.

Thanks again, you guys are great