almirsahbaz

Update just came out, and this is fixed. Thank you.

In my case file which is located in C:\Windows\System32\DFDWiz.exe is not reported as infected. Mine is located in C:\Windows\winsxs\amd64_microsoft-windows-d..ostic-user-resolver_31bf3856ad364e35_6.1.7600.16385_none_2129f6bd1f6002ae\DFDWiz.exe

I just scanned my computer and malwarebytes reported this file as infected (Trojan.FakeAlert). This file wasn't modified since 2009 and I think this might be a false positive. I attached my scanning results and this file, so you can check it and fix this in next update. mbam-log-2012-05-17 (21-25-37).txt DFDWiz.rar

I had same problem year ago, with same file. Than you said that it is a valid file, leftover after some installation. You can see original file (which is not modified since than) in here: http://forums.malwarebytes.org/index.php?showtopic=88005 . Then it was called: (Rogue.SystemSmartSecurity). I accidently post this same reply in that old thread. Sorry for that.

I had same problem year ago, with same file. Than you said that it is a valid file, leftover after some installation. You can see original file (which is not modified since than) in here: http://forums.malwarebytes.org/index.php?showtopic=88005 . Then it was called: (Rogue.SystemSmartSecurity).

Here is the log, but I can't navigate to this path. I can only see this file through malwarebytes file assassin, and here is also a screenshot of properties of this file. I can't even make archive with this file, because I'm getting message that file path is not valid. I can only copy this file and send you copy version of it. mbam-log-2012-05-07 (21-38-50).txt

I get this result too, again. I updated malwarebytes to the latest database, scanned my PC and this thing shows up.

I just finished scanning my computer using mbam.exe /developer . This file is located on c:\Windows\System32\Tools\ChPrio.exe (Rogue.SystemSmartSecurity) and c:\Windows\SysWOW64\Tools\ChPrio.exe (Rogue.SystemSmartSecurity) . Here is the log. mbam-log-2011-06-23 (22-36-35).txt

Are you 100% sure that this is false positive, I'm scanning now my computer again using mbam.exe /developer , and I will post log file soon.

When I update malwarebytes database today and scan my computer I get result that file ChPrio.exe which is located in C:\Windows\SysWOW64\Tools is infected. This file is not modified since 2009 and this is crucial system file, is this false positive? ChPrio.zip