Jump to content

Chadj

Members
  • Content Count

    4
  • Joined

  • Last visited

About Chadj

  • Rank
    New Member

Recent Profile Visitors

The recent visitors block is disabled and is not being shown to other users.

  1. Thanks! Again, y'all are faster than me!
  2. We use Timber Scan 300 by https://www.core-assoc.com/products/timberscan/ It installs on our accounting server and is executed at the workstations via desktop shortcut to the timberscan.NET.exe over mapped networked drive. There is also a MSSQL Named Pipe connection configured in 32 bit ODBC Administrator at each workstation. I've scanned the server NEt.exe file and everything checks out fine. When double-clicking the desktop icon the local file is quarantined. C:\Users\myaccount\AppData\Local\Spoon\Sandbox\TimberScan\3.8.6.40\local\stubexe\0xEF37104E112B0AD5\TimberScan.exe This file only resides during program use. Once it's closed, only "C:\Users\myaccount\AppData\Local\Spoon\Sandbox\TimberScan\" remains with no files in the last folder .tree. protection-log-2018-05-15.txt mbam-log-2018-05-15 (14-02-23).txt TimberScan.zip
  3. Yeah, I was concerned until I ran the original file. Only one and Malwarebytes is fine with it as well. It's 136mb so I couldn't upload it. https://www.virustotal.com/#/file/4d8ef3514506fd4f5ed1a3d497fc3399c24746124e0fb4df1b4dc671de8c4e71/detection And thanks for the other link. I'll read through those and follow up appropriately. I've also emailed my account rep as I'm up for renewal.
  4. Got a small problem. One of our accounting 3rd party addons has been quarantined by Malwarebytes. Timberscan.NET.exe resides on a server on our local domain and is executed via desktop shortcut and a "Named Pipes" MSSQL connection set up in 32bit ODBC Administrator. C:\Users\ ”account-name” \AppData\Local\Spoon\Sandbox\TimberScan\3.8.6.40\local\stubexe\0xEF37104E112B0AD5\TimberScan.exe is the file created locally that is being quarantined. I have attached it zipped. I would like to see this particular item excluded from future updates, unless of course this IS malware. Checking my server just in case. Thanks, TimberScan.zip
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.