Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: angelina_h on March 13, 2012, 12:32:44 AM

Title: avast detects rootkit in malwarebytes
Post by: angelina_h on March 13, 2012, 12:32:44 AM

hi i noticed in my scan log that avast detected a rootkit hidden file in mbamswissarmy.sys is this a fale positive as i have malwarebytes antimalware installed. should i take the action of do nothing or move to virus chest or delete? thanks

Title: Re: avast detects rootkit in malwarebytes
Post by: polonus on March 13, 2012, 12:45:11 AM

Hi angelina-h,

You can delete that file easy peasy, and after a reboot MBAM will have produced a brand new mbamswissarmy.sys file for you for your next MBAM-scan.
Enjoy. So actually no problem,

polonus

Title: Re: avast detects rootkit in malwarebytes
Post by: angelina_h on March 13, 2012, 01:01:35 AM

Hi, thanks so after i delete it i wont have to re download malwarebytes again? so this is definetly a false positive? thanks

Title: Re: avast detects rootkit in malwarebytes
Post by: iroc9555 on March 13, 2012, 01:15:10 AM

Quote from: angelina_h on March 13, 2012, 01:01:35 AM

Hi, thanks so after i delete it i wont have to re download malwarebytes again? so this is definetly a false positive? thanks

Yes. It is a F/P. mbamswissarmy.sys is a file used by MBAM to update its virus data base ( Like avast.setup ) MBAM should remove it afterward.

You should aldo exclude MBAM from Avast! and viseversa. Read this: Section K

http://forums.malwarebytes.org/index.php?showtopic=10138&st=0&p=417798&#entry417798

Title: Re: avast detects rootkit in malwarebytes
Post by: kevbeck on March 13, 2012, 04:00:28 AM

Quote from: iroc9555 on March 13, 2012, 01:15:10 AM

Quote from: angelina_h on March 13, 2012, 01:01:35 AM

Hi, thanks so after i delete it i wont have to re download malwarebytes again? so this is definetly a false positive? thanks

Yes. It is a F/P. Malwarebytes.sys is a file used by MBAM to update its virus data base ( Like avast.setup ) MBAM should remove it afterward.

You should aldo exclude MBAM from Avast! and viseversa. Read this: Section K

http://forums.malwarebytes.org/index.php?showtopic=10138&st=0&p=417798&#entry417798

i noticed the original inquiry was regarding path/file  "mbamswissarmy.sys" is this the same thing as Malwarebytes.sys without the "swissarmy"?

Title: Re: avast detects rootkit in malwarebytes
Post by: iroc9555 on March 13, 2012, 08:55:11 PM

Quote from: kevbeck on March 13, 2012, 04:00:28 AM

i noticed the original inquiry was regarding path/file  "mbamswissarmy.sys" is this the same thing as Malwarebytes.sys without the "swissarmy"?

 There is no malwarebytes.sys. Typo. Corrected. Thanks.