Possible false positive punylib.dll

[nord]

Moderator sent me over here from main forum.

More info there in my posts.

Using XP PRO SP3, Avast6, OutPost Firewall 2009 free and the email program, Foxmail 5.

Malwarebytes' Anti-Malware has detected a malicious process attempting to start and has blocked the execution attempt. Please select an option below.

c:\program files\fox6\3rdparty\punylib.dll (adware CNNIC

Log attached

mbam-log-2011-04-11 (18-15-00).7z

[nosirrah]

c:\program files\fox6\3rdparty\punylib.dll (adware CNNIC

This is not a detection from malwarebytes, the formatting is wrong. This also does not appear in the log you have attached:

Folders Infected:

c:\documents and settings\One\start menu\Programs\syscleaner (Rogue.sysCleaner) -> No action taken. [497857c1ef11b24e258d1b159073db25]

Files Infected:

c:\documents and settings\One\start menu\Programs\syscleaner\sysclean.com.pif (Rogue.sysCleaner) -> No action taken. [497857c1ef11b24e258d1b159073db25]

c:\documents and settings\One\start menu\Programs\syscleaner\sysclean_faq.doc.lnk (Rogue.sysCleaner) -> No action taken. [497857c1ef11b24e258d1b159073db25]

c:\WINDOWS\Explorer.win (Heuristics.Reserved.Word.Exploit) -> No action taken. [f0d177a1e11f718febe3ea71f50f43bd]

If the formatting above is just a typo and punylib.dll is actually being blocked by malwarebytes then please zip and attach punylib.dll to your next post.

[nord]

This is not a detection from malwarebytes, the formatting is wrong. This also does not appear in the log you have attached:

If the formatting above is just a typo and punylib.dll is actually being blocked by malwarebytes then please zip and attach punylib.dll to your next post.

nosirrah,

Ran a complete scan per instructions on RUN, and while waiting for your post, answered in the main forum, where I uploaded the log file and punylib.dll.

http://forums.malwarebytes.org/index.php?showtopic=81506

Tks.

[nosirrah]

This should be fixed now.

[nord]

This should be fixed now.

nosirrah,

Much thanks.