Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


user32.dll virus? what to do?

  • Please log in to reply
4 replies to this topic

#1 swinka


  • Members
  • 13 posts
  • Local time:01:52 PM

Posted 12 November 2015 - 04:43 PM



Please help me, because I don't know what to do right now.

I got Avira free antivirus, and it says that I have:


  [DETECTION] Contains suspicious code HEUR/Modified.SystemFile
  [NOTE]      The detection was classified as suspicious.
  [WARNING]   The file was ignored."


I don't know if that is just my antivirus paranoid, or is it a real thing. I've run combofix. It fixed the problem (avira didn't show anything), but today again i got this user32.dll info


Please help me what to do

BC AdBot (Login to Remove)



#2 boopme


    To Insanity and Beyond

  • Global Moderator
  • 72,440 posts
  • Gender:Male
  • Location:NJ USA
  • Local time:02:52 PM

Posted 12 November 2015 - 04:51 PM

Hello swinka

This is an important system file which is in use and deletion is possibly more serious than it being infected, so care has to be taken.
It may be infected with a worm so, I'd like to run MBAM.

51a46ae42d560-malwarebytes_anti_malware.Malwarebytes Anti-Malware
  • Download MalwareBytes Anti-Malware to your desktop.
  • Double-click mbam-setup-2.0.exe to start the installation of Malwarebytes Anti-Malware.
  • Follow the instructions on your screen to complete the installation. You can find the complete installation procedure here.
  • Click the Scan Now button, a threat scan will start automatically.
  • MalwareBytes Anti-Malware will now check for the latest updates. Click Update Now if new updates are available.
  • Your computer is now being scanned, please do not use your computer during the scan.
    • If no threats were found, click View detailed log.
      • Click Export and save the log as a .txt file on your Desktop or another location.
    • If the scan detected any threats, click Apply Actions.
      • To complete any actions taken you will be prompted to restart your computer...click on Yes.
      • After reboot, start Malwarebytes Anti-Malware again and click the History Tab at the top and select Application Logs.
      • Check the box next to Scan Log. Choose the most current scan and click View.
      • Click Export and save the log as a .txt file on your Desktop or another location.
  • Providing the MalwareBytes' Anti-Malware log file
    • Attach the log file you just saved to your next reply for further review.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 swinka

  • Topic Starter

  • Members
  • 13 posts
  • Local time:01:52 PM

Posted 13 November 2015 - 11:51 AM

Hi again
Thx for reply.
Ive scanned my computer with Malwarebytes (during the scan i've truned off comodo firewall and avira)
it didn't found anything (i've atached log). Maybe it's false alarm by avira?

Heres my log
Malwarebytes Anti-Malware

Scan Date: 2015-11-13
Scan Time: 16:25
Logfile: malwarebytes.txt
Administrator: Yes

Malware Database: v2015.11.13.05
Rootkit Database: v2015.11.13.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7
CPU: x64
File System: NTFS
User: Wojtek

Scan Type: Custom Scan
Result: Completed
Objects Scanned: 632333
Time Elapsed: 1 hr, 10 min, 14 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)

btw.  how to attach a file?

Edited by swinka, 13 November 2015 - 12:13 PM.

#4 swinka

  • Topic Starter

  • Members
  • 13 posts
  • Local time:01:52 PM

Posted 15 November 2015 - 12:41 PM

Any ideas?

#5 Dualcomm


  • Members
  • 48 posts
  • Gender:Male
  • Local time:10:52 AM

Posted 16 November 2015 - 06:20 AM

probably a false alarm

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users