Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Wdfmgrc.exe - Bad Image

  • Please log in to reply
No replies to this topic

#1 Melody Mocker

Melody Mocker

  • Members
  • 2 posts
  • Local time:01:56 AM

Posted 06 October 2008 - 12:44 PM


recently, my eset found this type of virus or trojan i suppose from my thumbdrive :

Time Module Object Name Threat Action User Information
10/5/2008 1:30:28 AM AMON file F:\autorun.inf Win32/AutoRun.PN worm quarantined - deleted USER-7BE247206E\user Event occurred on a new file created by the application: C:\WINDOWS\system32\wdfmgrc.exe. The file was moved to quarantine. You may close this window.

then, i ran a scan malwarewbytes and this is the log

Malwarebytes' Anti-Malware 1.28
Database version: 1222
Windows 5.1.2600 Service Pack 2

10/5/2008 2:01:03 AM
mbam-log-2008-10-05 (02-01-03).txt

Scan type: Full Scan (C:\|D:\|F:\|)
Objects scanned: 76406
Time elapsed: 27 minute(s), 40 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\System Volume Information\_restore{19B738A8-588F-4317-B0F8-E05CB1F3A499}\RP69\A0019080.exe (Trojan.Downloader) -> Quarantined and deleted successfully.

just now, i ran a scan with eset and at the beginning of it, it really terrified me as it says 'FILE LOCKED'..

Posted Image

to make it even worst.. almost everytime i start up windows.. this error msg appears..

wdfmgrc.exe - Bad Image
The application or DLL C:\WINDOWS\system32\softokn3.dll is not a valid Windows image. Please check this againts your installation diskette.


Edited by Melody Mocker, 06 October 2008 - 12:59 PM.

BC AdBot (Login to Remove)


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users