Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Strange behavior after trojan.dropper, sandboxiecrypto.exe

  • Please log in to reply
1 reply to this topic

#1 Carfan500


  • Members
  • 40 posts
  • Local time:08:36 AM

Posted 24 October 2010 - 04:37 PM

Last night, I was watching a YouTube video when a message from Sandboxie came up. I was using Opera. It said that SandboxieCrypto.exe was having issues. I apologize, but I did not think this would turn into an issue and did not write down the error. I clicked cancel and noticed SandboxieCrypto in the sandbox. I had never seen it before, so I tried to close it out. A few minutes later, I searched for a movie on Google and clicked its IMDb page. I am sure it was IMDb and not an imposter site. I got redirected to some other site (though it never occurred again). I also noticed that the speakers were not making any noise. They were definitely on, but they would not make any noises. I did a quick scan with avast!, which came up empty. Then I did a Malwarebytes scan and it found a trojan.dropper. I quarantined it and found that everything was back to normal. This morning, I got the same message and the sound cut out again. I did a full Malwarebytes scan and found nothing. It seems that the only way to restore the sound is to restart our Windows XP SP3 PC. Now that I think about it, I updated Sandboxie to a newer version a few days ago. Would that have anything to do with it? Also, I ran a few tests and it seems that whenever the sound cuts out, it cuts out on all browsers, sandboxed or not. My hard drive has been making these buh-uh noises that it only usually makes when the PC turns on, and my CPU usage seems unusually high. As I am posting this, it spontaneously jumps from less than 10% to well over 75%, even though I am hardly running anything but avast. The MBAM log that shows the trojan follows. Thank you for your time.

EDIT: A few hours after I posted this, avast! gave me a warning that it had blocked a trojan. The last site I had visited was nationstates.net, which I know to be safe. The image is below.

Posted Image

Malwarebytes' Anti-Malware 1.46

Database version: 4931

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

10/24/2010 12:03:40 AM
mbam-log-2010-10-24 (00-03-40).txt

Scan type: Quick scan
Objects scanned: 147122
Time elapsed: 11 minute(s), 10 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Documents and Settings\sean\Local Settings\Temp\n.exn (Trojan.Dropper) -> Quarantined and deleted successfully.

Edited by Carfan500, 24 October 2010 - 06:20 PM.

BC AdBot (Login to Remove)


#2 Carfan500

  • Topic Starter

  • Members
  • 40 posts
  • Local time:08:36 AM

Posted 27 October 2010 - 09:48 PM

Actually, never mind this. The day after I posted, the PC would not turn on at all. Thankfully, a friend was able to fix it.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users