Mourning the loss of our friend, WhitPhil.
There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
Search
 
General Security
Tag Cloud
access audio black screen blue screen boot bsod connection crash dell desktop driver drivers dvd email error excel firefox hard drive hardware hijackthis internet keyboard laptop malware monitor motherboard network networking outlook problem processor recovery registry cleaner router safe mode slow sound spyware tdlwsp.dll trojan vba video virus vista vundo windows windows 7 windows vista windows xp wireless
Search
Search for:
Tech Support Guy Forums > Security & Malware Removal > General Security >
Solved: Malwarebytes False Positive Confirmed?

Tip: Click here to scan for System Errors and Optimize PC performance
[ Sponsored Link ]

 
Thread Tools
peck1234's Avatar
Computer Specs
Senior Member with 866 posts.
 
Join Date: Aug 2008
Location: Long Island
Experience: Hardware Wizard
30-Oct-2009, 02:12 AM #1
Question Solved: Malwarebytes False Positive Confirmed?
Sent a support ticket to the staff... looks like a false positive to me...



Malwarebytes' Anti-Malware 1.41
Database version: 3057
Windows 6.1.7600

10/29/2009 6:58:42 PM
mbam-log-2009-10-29 (18-58-42).txt

Scan type: Full Scan (C:\|)
Objects scanned: 219497
Time elapsed: 18 minute(s), 50 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Users\Peck\AppData\Local\Apps\2.0\QWMMTV74.X9K\EN8DBY1E.CZP\clic...exe_9 a8dfcd080ccb114_0001.0002_none_19406d71b53cc551\GoogleUpdateSetup.exe (Trojan.Ransom) -> Quarantined and deleted successfully.
C:\Users\Peck\AppData\Local\Apps\2.0\QWMMTV74.X9K\EN8DBY1E.CZP\goog...app_9 a8dfcd080ccb114_0001.0002_d7d35fd2a0f2e170\GoogleUpdateSetup.exe (Trojan.Ransom) -> Quarantined and deleted successfully.
__________________
http://www.cpuid.com/hwmonitor.php Monitor Temps
http://www.malwarebytes.org/ Remove Malware
http://www.piriform.com/speccy System Info
Phantom010's Avatar
Computer Specs
Distinguished Member with 7,678 posts.
 
Join Date: Mar 2009
Location: Cyberspace
Experience: Advanced
30-Oct-2009, 10:37 AM #2
Could be but the AppData folder seems to be a common location for the Trojan. I wouldn't be so sure it's a false positive.
LinuxHacker's Avatar
Senior Member with 111 posts.
 
Join Date: Dec 1969
30-Oct-2009, 10:58 AM #3
googleupdate is a virus in my book. doing DoS attacks everytime you boot up asking questions you don't want to hear about.
peck1234's Avatar
Computer Specs
Senior Member with 866 posts.
 
Join Date: Aug 2008
Location: Long Island
Experience: Hardware Wizard
30-Oct-2009, 04:12 PM #4
hmm... well we will see....

I re-post when malwarebytes responds back


for now im marking solved...
peck1234's Avatar
Computer Specs
Senior Member with 866 posts.
 
Join Date: Aug 2008
Location: Long Island
Experience: Hardware Wizard
30-Oct-2009, 04:17 PM #5
Just got an email back from malwarebytes... its been confirmed to be a false positve...

Tom Mercado, Oct 30 09:33 (CDT):
I've been informed that this will be fixed in the next update so update later in the day
Phantom010's Avatar
Computer Specs
Distinguished Member with 7,678 posts.
 
Join Date: Mar 2009
Location: Cyberspace
Experience: Advanced
30-Oct-2009, 05:00 PM #6
Thanks for the update.
Reply Bookmark and Share

Smart Search

Find your solution!



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who want to help you solve your computer problems. See our Welcome Guide to get started.

Thread Tools


You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -5. The time now is 03:43 PM.
Copyright © 1996 - 2009 TechGuy, Inc. All rights reserved.
Powered by vBulletin, Copyright © 2000 - 2009, Jelsoft Enterprises Ltd.
Powered by Cermak Technologies, Inc.