JaySuper Posted October 21, 2011 I read about your app on PCWorld. I decided to download the free trial and do a quick scan to see what it would find on my PC. I use Avast Home (Free version) and Comodo Firewall. I still use Spybot - Search & Destroy. I keep my machine running good. Your program did find an issue with one particular file in my system32 folder (XP Professional). The file in question is named: msdxmlcb.dll SUPERAntiSpyware Scan Log https://www.superantispyware.com Generated 10/21/2011 at 08:40 AM Application Version : 5.0.1134 Core Rules Database Version : 7830 Trace Rules Database Version: 5642 Scan type : Quick Scan Total Scan Time : 00:06:20 Operating System Information Windows XP Professional 32-bit, Service Pack 3 (Build 5.01.2600) Administrator Memory items scanned : 655 Memory threats detected : 0 Registry items scanned : 32410 Registry threats detected : 0 File items scanned : 7061 File threats detected : 1 Rogue.Agent/Gen-Nullo[DLL] C:\WINDOWS\SYSTEM32\MSDXMLCB.DLL This is the information that your website provides for the file in question: Detected Item Description and InformationListed below is basic information about the detected application/process. This application may not be safe to have on your system. Summary : Rogue.Agent/Gen-Nullo[DLL].Process Company : Unknown Description : Rogue.Agent/Gen-Nullo[DLL].Process Threat Level (1-10) : 1 Processes : * CLSID List : I then scanned the file with an online site {virusscan.jotti.org} and these were the results for it: I decided not to delete the file in question. I have also zipped the file for you to study it. I hope that is okay with you. msdxmlcb.zip Please let me know if I should allow your program to delete the file? Or could it be just a False Positive? I tried googling the dll file, but could not find any information about it. I'd hate to delete it and later discover something will stop working on my machine. Thanks advance for your help. Share this post Link to post Share on other sites
ezekial52787 Posted October 23, 2011 I read about your app on PCWorld. I decided to download the free trial and do a quick scan to see what it would find on my PC. I use Avast Home (Free version) and Comodo Firewall. I still use Spybot - Search & Destroy. I keep my machine running good. Your program did find an issue with one particular file in my system32 folder (XP Professional). The file in question is named: msdxmlcb.dll SUPERAntiSpyware Scan Log https://www.superantispyware.com Generated 10/21/2011 at 08:40 AM Application Version : 5.0.1134 Core Rules Database Version : 7830 Trace Rules Database Version: 5642 Scan type : Quick Scan Total Scan Time : 00:06:20 Operating System Information Windows XP Professional 32-bit, Service Pack 3 (Build 5.01.2600) Administrator Memory items scanned : 655 Memory threats detected : 0 Registry items scanned : 32410 Registry threats detected : 0 File items scanned : 7061 File threats detected : 1 Rogue.Agent/Gen-Nullo[DLL] C:\WINDOWS\SYSTEM32\MSDXMLCB.DLL This is the information that your website provides for the file in question: I then scanned the file with an online site {virusscan.jotti.org} and these were the results for it: I decided not to delete the file in question. I have also zipped the file for you to study it. I hope that is okay with you. msdxmlcb.zip Please let me know if I should allow your program to delete the file? Or could it be just a False Positive? I tried googling the dll file, but could not find any information about it. I'd hate to delete it and later discover something will stop working on my machine. Thanks advance for your help. Hello JaySuper! I looked in my system32 folder and could not find the file you speak of at all, now this possibly could be due to that you are running XP and I am running vista home Premium SP2, but if this is not the case I would remove the file, I shall do some research on this file for you as well! Share this post Link to post Share on other sites
ezekial52787 Posted October 23, 2011 Also Jay, try scanning with malwarebytes www.malwarebytes.org I noticed bvirus total does not use SaS nor mbam to scan, and if you scan with fully updated mbam, and it comes up with nothing then I am fairly certain it is a false positive on SaS's part, but if it does detect it, then remove it right away, anti-spyware and anti-malware programs like mbam and SaS are much specific about detection, thus why they often detect things anti-virus programs do not. I wish there was an upload site that used many well known anti-spyware and anti-malware programs to scan a file, this way y ou could use both to find out if a file is REALLY infected or not. Share this post Link to post Share on other sites
JaySuper Posted October 24, 2011 Thanks for your reply. I downloaded and scanned with the Malwarebytes Anti-Malware (free version) and it did not report an issue with that file (nor any other file). (See the log below) Malwarebytes' Anti-Malware 1.51.2.1300 www.malwarebytes.org Database version: 8009 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 10/23/2011 9:23:54 PM mbam-log-2011-10-23 (21-23-54).txt Scan type: Quick scan Objects scanned: 175774 Time elapsed: 4 minute(s), 56 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) I hope you can learn more about the file in question. I want to be 100% certain before I delete it. Did you try downloading the zip file above? This way you can benchtest the file. Share this post Link to post Share on other sites