Author Topic: -= False Postive..? (Read 4174 times)

.: L' arc :. · « **on:** May 22, 2009, 05:55:28 AM »

-= I just ran a scan with Malwarebytes Antimalware & found this:

Infection name:    Spyware.Passwords
Filename:     Default.SFX*
Location:       C:\Program Files\WinRAR\Default.SFX
VirusTotal Analysis: VirusTotal
Malwarebytes Log: MediaFire

-= Could this be a False Positive..?

*In case you need a copy of the file you may download it at hXXp://www.mediafire.com/download.php?oklhdzhmmcj

-= Thanks in advance..

Tarq57 · « **Reply #1 on:** May 22, 2009, 06:17:39 AM »

Looks like it. Some of these reports are a bit old. Maybe it's a recurring problem?
http://forums.whatthetech.com/WinRARDefault_SFX_Trojan_Vundo_False_positive_t95788.html
http://www.malwarebytes.org/forums/index.php?showtopic=6592

.: L' arc :. · « **Reply #2 on:** May 22, 2009, 10:52:43 AM »

-= So, I'll keep it..

Tarq57 · « **Reply #3 on:** May 22, 2009, 12:49:58 PM »

Might pay to post it at the MalwareBytes forum?
Could be the sort of thing they would be interested in.
Here's a relatively recent similar detection, was resolved then on the 15th.

DavidR · « **Reply #4 on:** May 22, 2009, 04:17:10 PM »

Quote from: chronoboi001 on May 22, 2009, 10:52:43 AM

-= So, I'll keep it..

Try another update on MBAM and run the scan again, I notice that you have database version 2164 in your MBAM post.

Author Topic: -= False Postive..? (Read 4174 times)

.: L' arc :.

-= False Postive..?

Tarq57

Re: -= False Postive..?

.: L' arc :.

Re: -= False Postive..?

Tarq57

Re: -= False Postive..?

DavidR

Re: -= False Postive..?