spbrldv.dll - is this a virus?

Viruses and worms
1

Hello, on an earlier Malwarebytes scan I did, it found a file called AppData\LocalLow\spbrldv.dll

It labels this file as Trojan.Chrome.INJ

Is this a virus or a false positive?

2
Is this a virus or a false positive?
upload and test suspicious file(s) here www.virustotal.com / www.metascan-online.com if tested before, click rescan for a fresh result
3

I am not sure how to upload this file to a website.

I am afraid to do anything with it since its in MalwareBytes quarantine.

Is there any website that will tell me if this dll is a good or bad dll?

4
Is there any website that will tell me if this dll is a good or bad dll?
yes the above site, but you have to upload it .....

this is not a psychic medium so we cant tell just from a file name. a name is just a name

see this website infection here … it is called scuba99 :wink: …well not realy, i renamed the file
https://www.virustotal.com/en/file/00bd72dc2a4ecfceb4e6f354efd23c958556c75f07b0ee7d68ff3f5ddd385a70/analysis/1423413473/

5

Hi Pondus.

I don’t actually know how to upload a quarantined file.

Could you or someone please tell me the steps to do this from MalwareBytes.

6

if Malwarebytes detect, i am 99% sure it is correct.Iif you want to check it, you have to restore it from mbam quarantine to orginal location before you can upload it

how to use Virustotal … search youtube.com for how to do it videos, or google it

7

Thanks for your help. Appreciate it.

8

There is a nice write-up about this unknown exploit malcode here: http://www.bleepingcomputer.com/forums/t/557574/fake-chrome-virus-in-appdatalocallow-folder/
and here: https://blog.malwarebytes.org/exploits-2/2014/08/shining-some-light-on-the-unknown-exploit-kit/
Mind you for the first link that qualified malware cleansing routines are only meant for particular unique victims on unique machines, so there is no general cure to be found there and using that info there could be grossly endangering your machine.
[b]All malware routines should be made on basis of your particular logfiles attached and by a qualified removal expert: https://forum.avast.com/index.php?topic=53253.0[/b]

polonus