Author Topic: MalwareByes scan detects trojan?  (Read 6074 times)

0 Members and 1 Guest are viewing this topic.

Mishax

  • Guest
MalwareByes scan detects trojan?
« on: December 18, 2013, 11:14:43 PM »
Hello!

I just got finished doing a MBAM  and it detected three items as a Trojan.Dorkbot.ED):

C:\Drivers\Touchpad_Syna\x64\SynZMetr.exe (Trojan.Dorkbot.ED) -> No action taken.
C:\Program Files\Synaptics\SynTP\SynZMetr.exe (Trojan.Dorkbot.ED) -> No action taken.
c:\windows\system32\driverstore\filerepository\synpd.inf_amd64_neutral_caa6590973615c2a\synzmetr.ex

The thing is I have a dell and I think these files may have something to do with my touch pad.... are these false positives or should I be worried?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37529
  • Not a avast user
Re: MalwareByes scan detects trojan?
« Reply #1 on: December 18, 2013, 11:25:01 PM »
Quote
are these false positives or should I be worried?
upload suspicious files to www.virustotal.com and test with 40+ malware scanners (if tested before click new scan)
post link to scan result here


alternative: www.metascan-online.com / www.jotti.org


Mishax

  • Guest
Re: MalwareByes scan detects trojan?
« Reply #2 on: December 18, 2013, 11:26:28 PM »
How do I separate the files from the scan? I know how to do it on avast but I have no idea how to do it on malwarebytes.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37529
  • Not a avast user
Re: MalwareByes scan detects trojan?
« Reply #3 on: December 18, 2013, 11:28:34 PM »
How do I separate the files from the scan? I know how to do it on avast but I have no idea how to do it on malwarebytes.
dont understand?


Mishax

  • Guest
Re: MalwareByes scan detects trojan?
« Reply #4 on: December 18, 2013, 11:29:44 PM »
Ugh sorry for confusing you! I mean do I upload the log itself or the files themselves? I'm not quite sure how to do that.

The files aren't quarentined because it won't seem to let me.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37529
  • Not a avast user
Re: MalwareByes scan detects trojan?
« Reply #5 on: December 18, 2013, 11:34:19 PM »
if you have not taken any action on the files with malwarebytes (not moved to quarantine) then close malwarebytes program

go to www.virustotal.com  ....click choose file ... browse your way to

C:\Drivers\Touchpad_Syna\x64\SynZMetr.exe   post link to scan result here

then next

C:\Program Files\Synaptics\SynTP\SynZMetr.exe    post link to scan result here


or see how to do it video at youtube   http://www.youtube.com/results?search_query=virustotal.com&sm=3




Mishax

  • Guest
Re: MalwareByes scan detects trojan?
« Reply #6 on: December 18, 2013, 11:41:10 PM »
C:\Drivers\Touchpad_Syna\x64\SynZMetr.exe file is here: https://www.virustotal.com/en/file/cb7db95bb2fccc7d2d587180f7df7df67119c1c494896f073d4bdc618d2d6733/analysis/1387406150/

C:\Program Files\Synaptics\SynTP\SynZMetr.exe is here: https://www.virustotal.com/en/file/cb7db95bb2fccc7d2d587180f7df7df67119c1c494896f073d4bdc618d2d6733/analysis/

c:\windows\system32\driverstore\filerepository\synpd.inf_amd64_neutral_caa6590973615c2a\synzmetr.exe is here: https://www.virustotal.com/en/file/cb7db95bb2fccc7d2d587180f7df7df67119c1c494896f073d4bdc618d2d6733/analysis/

There you go!

Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2768
  • Volunteer
Re: MalwareByes scan detects trojan?
« Reply #7 on: December 18, 2013, 11:45:13 PM »
Hmm. Looks safe. However, upload and test files @ malwr.com

Upload results here so Steven and I can examine

Signed by: Synaptics Incorporated

"Touch the Future of Human Interface Technology". So Yes Most likely has to do with your Touchpad
« Last Edit: December 18, 2013, 11:47:07 PM by alan1998 »
VOLUNTEER

Senior Security Analyst; Sys Admin (Linux); Forensics/Incident Response.

Security is a mindset, not an application. Think BEFORE you click.

Mishax

  • Guest
Re: MalwareByes scan detects trojan?
« Reply #8 on: December 18, 2013, 11:49:58 PM »
Should I still upload the results onto malwr.com?

If so how do I get the results of it? Is it an attachment or do I paste the log?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37529
  • Not a avast user
Re: MalwareByes scan detects trojan?
« Reply #9 on: December 18, 2013, 11:53:56 PM »
have reported this in Malwarebytes forum .... now we wait and see   ;)     https://forums.malwarebytes.org/index.php?showtopic=138571


First submission 2011-11-20 16:22:11 UTC ( 2 years ago )


« Last Edit: December 18, 2013, 11:58:19 PM by Pondus »

Mishax

  • Guest
Re: MalwareByes scan detects trojan?
« Reply #10 on: December 18, 2013, 11:55:48 PM »
Thank you!

I posted there also asking for help but you guys responded very quickly. :)

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37529
  • Not a avast user
Re: MalwareByes scan detects trojan?
« Reply #11 on: December 19, 2013, 12:10:33 AM »
just one thing .... was your Malwarebytes fully updated when you did that scan?


Mishax

  • Guest
Re: MalwareByes scan detects trojan?
« Reply #12 on: December 19, 2013, 12:11:51 AM »
Yes, I had just updated it today right before I did the scan. It was outdated by 8 days I think.

Offline Melver

  • Newbie
  • *
  • Posts: 5
Re: MalwareByes scan detects trojan?
« Reply #13 on: December 19, 2013, 12:15:39 AM »
Hey there, to make it more comfy in one matter i got this strange report aswell wen did a full scan on same program.

Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2768
  • Volunteer
Re: MalwareByes scan detects trojan?
« Reply #14 on: December 19, 2013, 12:16:44 AM »
Given I found more research I think you're good to go.
VOLUNTEER

Senior Security Analyst; Sys Admin (Linux); Forensics/Incident Response.

Security is a mindset, not an application. Think BEFORE you click.