Jump to content

Kalnon

Members
  • Posts

    5
  • Joined

  • Last visited

Reputation

0 Neutral
  1. Also I should add, I did scan the zip files I downloaded from the website before trying to run them and Malwarebytes said nothing was found. This was before I tried to run the setup executable.
  2. Sorry I was wrong, I believe that log was a scheduled scan that detected nothing, please ignore it. After going through the other logs around the same time I don't think there is one because Malwarebytes automatically detected it and notified me in a notification as I was trying to run the executable.
  3. Found the logs. I'm pretty sure this is the right one. 2B25408A16A6024444864853C81F139EBE4137F0FDF333B518541D626D3C423C { "applicationVersion" : "4.4.2.123", "chromeSyncResetQueryRequested" : false, "chromeSyncResetQueryResult" : false, "clientID" : "687ad622-ae6f-11eb-872e-00d861722ec9", "clientType" : "scheduledScan", "componentsUpdatePackageVersion" : "1.0.1358", "coreDllFileVersion" : "3.0.0.1165", "cpu" : "x64", "dbSDKUpdatePackageVersion" : "1.0.42939", "detectionDateTime" : "2021-07-11T07:38:30Z", "fileSystem" : "NTFS", "id" : "fcfb5c34-e21a-11eb-b63a-000000000000", "isUserAdmin" : true, "licenseState" : "licensed", "linkagePhaseComplete" : true, "loggedOnUserName" : "System", "machineID" : "", "os" : "Windows 10 (Build 19042.1052)", "schemaVersion" : 19, "sourceDetails" : { "aggressiveMode" : false, "clientMetadata" : { "jobId" : "", "scheduleId" : "", "scheduleTag" : "" }, "ddsigEnabled" : true, "filesScannedByIG" : 0, "objectsScanned" : 395052, "scanEndTime" : "2021-07-11T07:48:24Z", "scanOnlineStatus" : "online", "scanOptions" : { "pumHandling" : "detect", "pupHandling" : "detect", "scanArchives" : true, "scanFileSystem" : true, "scanMemoryObjects" : true, "scanPUMs" : true, "scanPUPs" : true, "scanRookits" : false, "scanStartupAndRegistry" : true, "scanType" : "threat", "useHeuristics" : true }, "scanResult" : "completed", "scanStartTime" : "2021-07-11T07:38:30Z", "scanState" : "completed", "shurikenEnabled" : true, "type" : "scan" }, "threats" : [ { "ddsSigFileVersion" : "01328059", "linkedTraces" : [ ], "mainTrace" : { "archiveMember" : "Binary.ISSetup.dll.msi", "archiveMemberMD5" : "414146989270065C3B32E823F63155ED", "cleanAction" : "ignore", "cleanContext" : { }, "cleanResult" : "notStarted", "cleanResultErrorCode" : 0, "cleanTime" : "", "generatedByPostCleanupAction" : false, "hubbleRequestErrorCode" : -3, "id" : "338c1404-e21c-11eb-8345-000000000000", "igExitCode" : "", "isPEFile" : true, "isPEFileValid" : true, "isWhitelistedByAdsInfo" : false, "linkType" : "none", "objectMD5" : "963D8819B79E53588D7AE2F8F3B26112", "objectPath" : "C:\\WINDOWS\\INSTALLER\\26C713.MSI", "objectSha256" : "F98157C29EA7FEA5AF69C68FCC8F17C99F6ADA0ABEFD847B77B2867400B52EC1", "objectSize" : -1, "objectType" : "file", "resolvedPath" : "", "suggestedAction" : { "archiveDir" : false, "chromeExtensionOther" : false, "chromeExtensionPreferences" : false, "chromeExtensionSecurePreferences" : false, "chromeExtensionSyncData" : false, "chromeUrlOther" : false, "chromeUrlSecurePreferences" : false, "chromeUrlSyncData" : false, "chromeUrlWebData" : false, "disableHubbleWhiteListing" : false, "disableSignatureWhiteListing" : false, "fileDelete" : true, "fileReplace" : false, "fileTxtReplace" : false, "folderDelete" : false, "isChromeObject" : false, "isDDS" : true, "isDoppleganging" : false, "isExternalDetection" : false, "isPUP" : false, "isShuriken" : false, "isWMIEventConsumer" : false, "killProcess" : false, "minimalWhiteListing" : false, "moduleUnload" : false, "noLinking" : false, "physicalSectorReplace" : false, "priorityHigh" : false, "priorityNormal" : false, "priorityUrgent" : false, "processUnload" : false, "regKeyDelete" : false, "regValueDelete" : false, "regValueReplace" : false, "shortcutReplace" : false, "silentMode" : true, "singleDelete" : false, "treatAsRootkit" : false, "useDDA" : false, "verifyResolvedPath" : false, "whitelistCheckError" : false }, "winVerifyTrustResult" : { "expectedError" : false, "lastErrorCode" : 0, "wvtCalled" : true, "wvtResult" : 0 } }, "ruleID" : 935131, "ruleString" : "0000000000000000000003EB", "rulesVersion" : "1.0.42939", "srcEngineComponent" : "dds", "srcEngineThreatNames" : [ "Malware.Heuristic.1003" ], "threatID" : 1000001, "threatName" : "Malware.Heuristic.1003" }, { "ddsSigFileVersion" : "01328059", "linkedTraces" : [ ], "mainTrace" : { "archiveMember" : "Binary.ISSetup.dll.msi", "archiveMemberMD5" : "C40950BEABA9DF3A913A46382BE15587", "cleanAction" : "ignore", "cleanContext" : { }, "cleanResult" : "notStarted", "cleanResultErrorCode" : 0, "cleanTime" : "", "generatedByPostCleanupAction" : false, "hubbleRequestErrorCode" : -3, "id" : "3bf1a83e-e21c-11eb-b1f6-000000000000", "igExitCode" : "", "isPEFile" : true, "isPEFileValid" : true, "isWhitelistedByAdsInfo" : false, "linkType" : "none", "objectMD5" : "9A8E2A98FC0E831E0896ECF5D101BDA7", "objectPath" : "C:\\WINDOWS\\INSTALLER\\26C723.MSI", "objectSha256" : "8440A0A2885C118D830FA0FB98A85007D1D26FBDB9CF100CCEDC46ED05AB4F4E", "objectSize" : -1, "objectType" : "file", "resolvedPath" : "", "suggestedAction" : { "archiveDir" : false, "chromeExtensionOther" : false, "chromeExtensionPreferences" : false, "chromeExtensionSecurePreferences" : false, "chromeExtensionSyncData" : false, "chromeUrlOther" : false, "chromeUrlSecurePreferences" : false, "chromeUrlSyncData" : false, "chromeUrlWebData" : false, "disableHubbleWhiteListing" : false, "disableSignatureWhiteListing" : false, "fileDelete" : true, "fileReplace" : false, "fileTxtReplace" : false, "folderDelete" : false, "isChromeObject" : false, "isDDS" : true, "isDoppleganging" : false, "isExternalDetection" : false, "isPUP" : false, "isShuriken" : false, "isWMIEventConsumer" : false, "killProcess" : false, "minimalWhiteListing" : false, "moduleUnload" : false, "noLinking" : false, "physicalSectorReplace" : false, "priorityHigh" : false, "priorityNormal" : false, "priorityUrgent" : false, "processUnload" : false, "regKeyDelete" : false, "regValueDelete" : false, "regValueReplace" : false, "shortcutReplace" : false, "silentMode" : true, "singleDelete" : false, "treatAsRootkit" : false, "useDDA" : false, "verifyResolvedPath" : false, "whitelistCheckError" : false }, "winVerifyTrustResult" : { "expectedError" : false, "lastErrorCode" : 0, "wvtCalled" : true, "wvtResult" : 0 } }, "ruleID" : 935131, "ruleString" : "0000000000000000000003EB", "rulesVersion" : "1.0.42939", "srcEngineComponent" : "dds", "srcEngineThreatNames" : [ "Malware.Heuristic.1003" ], "threatID" : 1000001, "threatName" : "Malware.Heuristic.1003" } ], "threatsDetected" : 0 }
  4. Okay, thank you for the response and you are correct, I did have expert system algorithms turned on. I'm curious though what this setting is used for or when would it be appropriate to use this setting? Could you please direct me to where the log files are stored? I can't seem to find them. As for attaching the file in a zip file, should I just restore the file and zip it? That's the only way I can think of. Or maybe I could attach the zip files I downloaded from MSI's website containing the setup files? Sorry for all the questions, I know my way around computers very well but as I said before I don't know a lot about dealing with or handling malware and viruses in these ways.
  5. Hello, I'm trying to figure out if what I've downloaded is really malware or not. I have two MSI gaming monitors and they each have a different OSD app because they are different models. The OSD apps are just a way to adjust monitor settings via the Windows app instead of using the monitor's buttons. I originally installed them before I started using Malwarebytes Premium. I recently downloaded the latest versions to update the apps directly from MSI's official website. I unzipped the files for each app and tried running the setup executables and each time Malwarebytes flagged both as Malware.Heuristic.1003 and quarantined a file in a temp folder called ISSetup.dll. I think it has to be a false positive because I downloaded it directly from the manufacturer's website but I want to be absolutely sure before I try to install these apps because I don't know a lot about malware. I would greatly appreciate any help anyone can give to help me resolve this. If further information is needed, please let me know and I will do my best to provide it, thanks.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.