Win:32 Banker found in C:\WINDOWS\system32\user32.dll (Might Be False Positive)

Viruses and worms
1

http://www.virustotal.com/analisis/3f66f73002c31fd0b28b76b5d28e1c30

I don’t know if its important or not nor if its a virus or not but only two anti-viruses detect it. Mcafee detected new malware and ESafe detected Win:32 Banker. If it isn’t a false positive, what should my next action be? Is it required that I open the dll in notepad and give you the coding in it?

~Donovan

2

Erm, avast! is not detecting it so i don’t really see a problem here.
Plus the file is in a correct location.

3

Thanks for your feedback so quick. I wanted to be sure. But then again, it could be real because the first time I download, updated, and ran a full scan with Malwarebytes’ Anti-Malware, it found 39 viruses, lots of Myfunweb, Trojans, and bankers.

4

Can you pack this user32.dll file to 7z or RAR archive and send it to rejzor@gmail.com ?
I’ll check it out for you what it is exactly.

5

I sent the file in 7z achivement to the email address you told me.

Reply:
It looks normal. But i suggest you send this file to eSafe (the one
which was detecting it as Banker) and wait for their analysis. If it’s
a FP, they’ll fix it, if it’s not, they’ll confirm it’s a malware.

How do I send it to eSafe?