Taffy1812

I have a possible False Positive to report. MWB found this Trojan in an HP Solution Centre file for my HP Deskjet F2280. The Solution Centre had just been updated by HP but all this happened around the same time last week that Microsft found big security holes in Internet Explorer. I followed the instructions in “READ BEFORE REPORTING” etc but when I ran the scan it found nothing – presumably because the (possible) Trojan has now been quarantined. So here is a copy of the original log – is it enough for you to check it out please? I’ve no idea how to save as Zip or RAR. Sorry! Malwarebytes Anti-Malware 1.65.0.1400 www.malwarebytes.org Database version: v2012.09.23.05 Windows XP Service Pack 3 x86 NTFS Internet Explorer 8.0.6001.18702 User :: USER-137D63F698 [administrator] 23/09/2012 18:40:43 mbam-log-2012-09-23 (18-40-43).txt Scan type: Full scan (C:\|D:\|E:\|K:\|) Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 581134 Time elapsed: 2 hour(s), 4 minute(s), 57 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\PROGRAM FILES\HP\DIGITAL IMAGING\HELP\PLAYER\FLASHPLA.EXE (Trojan.Spatet) -> Data: 3 -> Quarantined and deleted successfully. Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 1 C:\Program Files\HP\Digital Imaging\help\player\FlashPla.exe (Trojan.Spatet) -> Quarantined and deleted successfully. (end)

Thanks for this, daledoc1. I now know more about blabbers, having been pointed to this: http://www.blabbers.com/app/portal/about.jsp. I hadn't realised that PUP was a code - I thought it was part of the 'threat' name. I've just searched my PC and have found that blabbers was installed by Flash Player. I'll see if I can safely remove the files. Thanks again for your help.

Hello! I've just run your excellent Malwarebytes (free version) and it has quarantined & deleted two items that were in the registry. Both are described as PUP BLABBERS - one was located in HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext \Settings and the other in HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext \Stats I've searched the internet but have found only three sites - two spanish/south american and one french (http://forum.pcastuces.com/sujet.asp?f=25&s=64115). All of the posts relate to Malwarebyte scans within the past week or so. I came here to find out more about these quaintly-named items. I tried to search the forum but got nowhere becuse the Search facility requires a minimum of four characters - I posted in the Suggestion section about that. So what is a PUP BLABBER? Is is a serious threat? Waht does it do? Has something changed recently with Malwarebytes that has picked up the threats, or is it just a co-incidence? I'd really appreciate your help. Thanks.

Hi. This is my very first post! My second will be an enquiry about threats that Malwarebyte has just found. They're called PUP BLABBERS bur when I searched for this I got an error message - "One or all of your search keywords were below 4 characters". Is there a way to improve the Search, or have I simply done it wrong, please? !!