Help! I’m on a PC, Windows 8.1, 64 bit OS and just the other day, I kept getting pop ups every 30 seconds that there was a threat detected of rsa64.dll file. I’ve done full scans, even downloaded Malwarebytes Anti-malware and both quick and full scans on Avast do not reveal the infection. And yet I look at the quarantine folder and there the files are. And when I’m on the desktop mode, it keeps flashing right before the pop up for threat detected comes up. Help?
Please attach your logs. (MBAM, OTL and aswMBR…!!)
Instructions: http://forum.avast.com/index.php?topic=53253.0
Hi,
Can we see the screenshot of detection? Or how about to upload that file to www.virustotal.com, because this can be False Positive detection.
Look here → http://www.freefixer.com/library/file/rsa64.dll-119718/
Okay. Please see attached the OTL (I’m on Windows 8.1 so the others aren’t compatible). I’ve likewise attached the screencaps for both the detection and the Quarantine Log.
Main problem? Except for avast, nothing else seems to find this file. And when I detach my PC from the network, it seems clean. But as soon as I reconnect it, there it is again.
Help!
Screencap of the detection. I tried the options you gave. None worked.
Screencap of Quarantine Log
MBAM log
Please upload detected files on Virustotal. Make sure to press Reanalyze
Okay so I tried searching for the files but the search comes back negative so I can’t send it. After the last MBAM scan, things seemed to have quieted down. I’m crossing my fingers…
I have tried everything guys… I have also run ComboFix and nothing worked!
What else can I do?
Thanks!
Cate
Don’t run ComboFix w/o supervision. Post your logs. Combofix included. Which will be in C:\Combofix.txt
Do you still have detections?
maybe this can help:
go to win + r + msconfig → home tab or boot tab
and uncheck programs that you think are weird.