Trojan, False Or True???

[Guest]

I am just trying to help other Members with this posting.

I have just downloaded the new Beta 8030 and before I could instal it McAfee quarantined it as it contained a trojan.

Now I KNOW what you are going to say, and I was NOT going to even mention it, but this time was different.

The instals have been working fine for a while now so when this happened today I (reluctantly) disabled McAfee downloaded the 8030 again and installed it, then enabled McAfee again. This is what I did the last time McAfee said there was a trojan in one of the DVD Fab downloads.

The difference this time was after I restored McAfee it again quarantined the 8030 download, it did NOT do that before.

MORE OF A CONCERN was that I decided to run Malwarebytes after that and it has NEVER EVER found anything on my computer but it DID this time, the (supposed) trojan in this 8030 download.

DVD Fab 8030 seems to be installed okay, I haven't used it yet, but I just wanted to let others know what happened, and see what you think???

[Guest]

Avira does not show a problem and scanning the installer with Malwarebytes does not show anything for me.

Did you make a note of what Malwarebytes found?
Can you google it and see what it is supposed to be?

[Guest]

As I said I ONLY mentioned it because Malwarebytes also quarantined the file, I had done one of their scans only last night, no problems and I never have had, also did another scan since then with no problems.

I have deleted the quarantined files already, but this is what Malwarebytes say of that scan?

Memory Processes Infected: 0
Memory Modules Infected: 1
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
C:\Users\DAVID\AppData\Local\Temp\CD1E.tmp (Trojan.Agent) -> Delete on reboot.

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Users\DAVID\AppData\Local\Temp\CD1E.tmp (Trojan.Agent) -> Delete on reboot.

---------------------------------------------------

I do not understand it all, but that ''TrojanAgent'' is from the DVD Fab 8030 installer?

[signals]

I just scanned the installer with Kaspersky2011 and it reported no problems. ??

[Guest]

Okay, thanks, as I said IF it was ONLY McAfee I would not have even said anything, but when Malwarebytes also quarantined it I was worried?

Guess what, just did a Google search as suggested, and the first thing that came up.............................. was THIS POST.

[AGJ]

Strange malwarebytes did not say it was infected for the download file I have. I have a paid version of MBAM. Maybe do a update for MBAM and scan the download file again to see if it still says it infected also below is my MBAM report

Malwarebytes' Anti-Malware 1.46

https://www.malwarebytes.org

Database version: 4980

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

28/10/2010 4:02:41 PM
mbam-log-2010-10-28 (16-02-41).txt

Scan type: Quick scan
Objects scanned: 1
Time elapsed: 2 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

[Guest]

Just been trying to do as you suggested, but every time I try to update Malwarebytes I get an error message ...... 732 (0,0)..

If you are all sure there is NO problem, leave it as that.

[AGJ]

every time I try to update Malwarebytes I get an error message ...... 732 (0,0)..
:

Sounds like you have a problem with MBAM if you getting an error when you try to update. But I wouldn't worry about DVDFab as it seems some scans are fine

[Guest]

I just tried going to Malwarebytes via the link in AGJ's post, rather than just from my desktop, and I was able to update it okay, thank you.

I then disabled McAfee again, downloaded the link for 8030 instal again and did another quick scan with Malwarebytes, it found NO problems this time.

I then enabled McAfee again and it quarantined 8030 again.

I then did another quick scan with Malwarebytes in case it picked up anything from McAfee quarantining 8030, but it was still NO problems, so looks like it is just that &^%$#@ McAfee again, thank you all.

[crackinhedz]

false positives...that's why I stay away from Mcafee or Norton.

[Guest]

Yes, I think we all know that.

However, as I said, this time was different as Malwarebytes also quarantined 8030.

Anyway all okay now, don't know exactly what the problem was, but updating Malwarebytes has got rid of the problem, except for McAfee.

[Timothy Arens]

Dvdfab v.8030 Beta - false positive warning

McAfee strikes again,
false positive Warning for New.Malware.cn.

This is again a false positive warnining.
As you can see here McAfee is the only one who report a trojan horse.
I did sent McAfee already an E-mail to correct this false positive warning.

AhnLab-V3 2010.10.29.00 2010.10.28 -
AntiVir 7.10.13.67 2010.10.28 -
Antiy-AVL 2.0.3.7 2010.10.29 -
Authentium 5.2.0.5 2010.10.29 -
Avast 4.8.1351.0 2010.10.29 -
Avast5 5.0.594.0 2010.10.29 -
AVG 9.0.0.851 2010.10.28 -
BitDefender 7.2 2010.10.29 -
CAT-QuickHeal 11.00 2010.10.26 -
ClamAV 0.96.2.0-git 2010.10.29 -
Comodo 6546 2010.10.29 -
Emsisoft 5.0.0.50 2010.10.29 -
eSafe 7.0.17.0 2010.10.28 -
eTrust-Vet 36.1.7941 2010.10.28 -
F-Prot 4.6.2.117 2010.10.28 -
F-Secure 9.0.16160.0 2010.10.29 -
Fortinet 4.2.249.0 2010.10.28 -
GData 21 2010.10.29 -
Ikarus T3.1.1.90.0 2010.10.29 -
Jiangmin 13.0.900 2010.10.29 -
K7AntiVirus 9.67.2856 2010.10.28 -
Kaspersky 7.0.0.125 2010.10.29 -
McAfee 5.400.0.1158 2010.10.29 New Malware.cn
McAfee-GW-Edition 2010.1C 2010.10.28 New Malware.cn
Microsoft 1.6301 2010.10.29 -
NOD32 5573 2010.10.29 -
Norman 6.06.10 2010.10.29 -
nProtect 2010-10-28.01 2010.10.28 -
Panda 10.0.2.7 2010.10.29 -
PCTools 7.0.3.5 2010.10.29 -
Prevx 3.0 2010.10.29 -
Rising 22.71.03.02 2010.10.29 -
Sunbelt 7162 2010.10.29 -
SUPERAntiSpyware 4.40.0.1006 2010.10.29 -
Symantec 20101.2.0.161 2010.10.29 -
TheHacker 6.7.0.1.073 2010.10.28 -
TrendMicro 9.120.0.1004 2010.10.28 -
TrendMicro-HouseCall 9.120.0.1004 2010.10.29 -
VBA32 3.12.14.1 2010.10.28 -
ViRobot 2010.10.25.4110 2010.10.29 -
VirusBuster 12.70.10.0 2010.10.28 -

At your service
Timothy Arens

[maineman]

McAfee strikes again,
false positive Warning for New.Malware.cn.

Thanks Tim, moving to an existing thread on this subject

[Guest]

Just for info, I downloaded the new beta 8031 this morning, was expecting the same problem with McAfee at least, this time no problems.

Thank you again for the help yesterday with the Malwarebytes.

[Timothy Arens]

maineman, davidh,

You're welcome anytime