Last night, I was watching a YouTube video when a message from Sandboxie came up. I was using Opera. It said that SandboxieCrypto.exe was having issues. I apologize, but I did not think this would turn into an issue and did not write down the error. I clicked cancel and noticed SandboxieCrypto in the sandbox. I had never seen it before, so I tried to close it out. A few minutes later, I searched for a movie on Google and clicked its IMDb page. I am sure it was IMDb and not an imposter site. I got redirected to some other site (though it never occurred again). I also noticed that the speakers were not making any noise. They were definitely on, but they would not make any noises. I did a quick scan with avast!, which came up empty. Then I did a Malwarebytes scan and it found a trojan.dropper. I quarantined it and found that everything was back to normal. This morning, I got the same message and the sound cut out again. I did a full Malwarebytes scan and found nothing. It seems that the only way to restore the sound is to restart our Windows XP SP3 PC. Now that I think about it, I updated Sandboxie to a newer version a few days ago. Would that have anything to do with it? Also, I ran a few tests and it seems that whenever the sound cuts out, it cuts out on all browsers, sandboxed or not. My hard drive has been making these buh-uh noises that it only usually makes when the PC turns on, and my CPU usage seems unusually high. As I am posting this, it spontaneously jumps from less than 10% to well over 75%, even though I am hardly running anything but avast. The MBAM log that shows the trojan follows. Thank you for your time.
EDIT: A few hours after I posted this, avast! gave me a warning that it had blocked a trojan. The last site I had visited was nationstates.net, which I know to be safe. The image is below.
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Database version: 4931
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
10/24/2010 12:03:40 AM
mbam-log-2010-10-24 (00-03-40).txt
Scan type: Quick scan
Objects scanned: 147122
Time elapsed: 11 minute(s), 10 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
C:\Documents and Settings\sean\Local Settings\Temp\n.exn (Trojan.Dropper) -> Quarantined and deleted successfully.
This post has been edited by Carfan500: 24 October 2010 - 06:20 PM
Help
Back to top
