msdxmlcb.dll

[JaySuper]

I read about your app on PCWorld. I decided to download the free trial and do a quick scan to see what it would find on my PC. I use Avast Home (Free version) and Comodo Firewall. I still use Spybot - Search & Destroy. I keep my machine running good.

Your program did find an issue with one particular file in my system32 folder (XP Professional). The file in question is named: msdxmlcb.dll

SUPERAntiSpyware Scan Log
https://www.superantispyware.com

Generated 10/21/2011 at 08:40 AM

Application Version : 5.0.1134

Core Rules Database Version : 7830
Trace Rules Database Version: 5642

Scan type       : Quick Scan
Total Scan Time : 00:06:20

Operating System Information
Windows XP Professional 32-bit, Service Pack 3 (Build 5.01.2600)
Administrator

Memory items scanned      : 655
Memory threats detected   : 0
Registry items scanned    : 32410
Registry threats detected : 0
File items scanned        : 7061
File threats detected     : 1

Rogue.Agent/Gen-Nullo[DLL]
C:\WINDOWS\SYSTEM32\MSDXMLCB.DLL

This is the information that your website provides for the file in question:

Detected Item Description and Information

Listed below is basic information about the detected application/process. This application may not be safe to have on your system.

Summary : Rogue.Agent/Gen-Nullo[DLL].Process

Company : Unknown

Description : Rogue.Agent/Gen-Nullo[DLL].Process

Threat Level (1-10) : 1

Processes : *

CLSID List :

I then scanned the file with an online site {virusscan.jotti.org} and these were the results for it:

I decided not to delete the file in question. I have also zipped the file for you to study it. I hope that is okay with you.

msdxmlcb.zip

Please let me know if I should allow your program to delete the file? Or could it be just a False Positive? I tried googling the dll file, but could not find any information about it. I'd hate to delete it and later discover something will stop working on my machine.

Thanks advance for your help.

[ezekial52787]

I read about your app on PCWorld. I decided to download the free trial and do a quick scan to see what it would find on my PC. I use Avast Home (Free version) and Comodo Firewall. I still use Spybot - Search & Destroy. I keep my machine running good.

Your program did find an issue with one particular file in my system32 folder (XP Professional). The file in question is named: msdxmlcb.dll

SUPERAntiSpyware Scan Log
https://www.superantispyware.com

Generated 10/21/2011 at 08:40 AM

Application Version : 5.0.1134

Core Rules Database Version : 7830
Trace Rules Database Version: 5642

Scan type   	: Quick Scan
Total Scan Time : 00:06:20

Operating System Information
Windows XP Professional 32-bit, Service Pack 3 (Build 5.01.2600)
Administrator

Memory items scanned      : 655
Memory threats detected   : 0
Registry items scanned    : 32410
Registry threats detected : 0
File items scanned        : 7061
File threats detected 	: 1

Rogue.Agent/Gen-Nullo[DLL]
C:\WINDOWS\SYSTEM32\MSDXMLCB.DLL

This is the information that your website provides for the file in question:

I then scanned the file with an online site {virusscan.jotti.org} and these were the results for it:

I decided not to delete the file in question. I have also zipped the file for you to study it. I hope that is okay with you.

msdxmlcb.zip

Please let me know if I should allow your program to delete the file? Or could it be just a False Positive? I tried googling the dll file, but could not find any information about it. I'd hate to delete it and later discover something will stop working on my machine.

Thanks advance for your help.

Hello JaySuper! I looked in my system32 folder and could not find the file you speak of at all, now this possibly could be due to that you are running XP and I am running vista home Premium SP2, but if this is not the case I would remove the file, I shall do some research on this file for you as well!

[ezekial52787]

Also Jay, try scanning with malwarebytes www.malwarebytes.org I noticed bvirus total does not use SaS nor mbam to scan, and if you scan with fully updated mbam, and it comes up with nothing then I am fairly certain it is a false positive on SaS's part, but if it does detect it, then remove it right away, anti-spyware and anti-malware programs like mbam and SaS are much specific about detection, thus why they often detect things anti-virus programs do not. I wish there was an upload site that used many well known anti-spyware and anti-malware programs to scan a file, this way y ou could use both to find out if a file is REALLY infected or not.

[JaySuper]

Thanks for your reply.

I downloaded and scanned with the Malwarebytes Anti-Malware (free version) and it did not report an issue with that file (nor any other file). (See the log below)

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Database version: 8009

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

10/23/2011 9:23:54 PM
mbam-log-2011-10-23 (21-23-54).txt

Scan type: Quick scan
Objects scanned: 175774
Time elapsed: 4 minute(s), 56 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

I hope you can learn more about the file in question. I want to be 100% certain before I delete it. Did you try downloading the zip file above? This way you can benchtest the file.