Jump to content

Search the Community

Showing results for tags 'mp3Tag'.

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


  • Announcements
    • Malwarebytes News
    • Beta Testing Program
  • Malware Removal Help
    • Windows Malware Removal Help & Support
    • Mac Malware Removal Help & Support
    • Mobile Malware Removal Help & Support
    • Malware Removal Self-Help Guides
  • Malwarebytes for Home Support
    • Malwarebytes for Windows Support Forum
    • Malwarebytes for Mac Support Forum
    • Malwarebytes for Android Support Forum
    • Malwarebytes for iOS Support
    • Malwarebytes Privacy
    • Malwarebytes Browser Guard
    • False Positives
    • Comments and Suggestions
  • Malwarebytes for Business Support
    • Malwarebytes Endpoint Protection
    • Malwarebytes Incident Response (includes Breach Remediation)
    • Malwarebytes Endpoint Security
    • Malwarebytes Business Products Comments and Suggestions
  • Malwarebytes Tools and Other Products
    • Malwarebytes AdwCleaner
    • Malwarebytes Junkware Removal Tool Support
    • Malwarebytes Anti-Rootkit BETA Support
    • Malwarebytes Techbench USB (Legacy)
    • Malwarebytes Secure Backup discontinued
    • Other Tools
    • Malwarebytes Tools Comments and Suggestions
  • General Computer Help and Security Updates
    • BSOD, Crashes, Kernel Debugging
    • General Windows PC Help
  • Research Center
    • Newest Rogue-Ransomware Threats
    • Newest Malware Threats
    • Newest Mobile Threats
    • Newest IP or URL Threats
    • Newest Mac Threats
    • Report Scam Phone Numbers
  • General
    • General Chat
    • Forums Announcements & Feedback

Find results in...

Find results that contain...

Date Created

  • Start


Last Updated

  • Start


Filter by number of...


  • Start





Website URL






Found 1 result

  1. MBAM is now reporting mp3Tag as a virus, Trojan.FakeMS.ED. The attached program files, one of the installer, the other of the exe in program files, are zipped with the password being "mbam" (in lower case): virustotal scan of the exe in C:\ProgramFiles(x86)\mp3Tag--https://www.virustotal.com/en/file/76a99a8a007271ad04ece9294f072075a55472b6b1690734a036f4c0c2d1deb7/analysis/ Rescanning of the exe in program files today gives MBAM as the only one reporting it as a positive: https://www.virustotal.com/en/file/76a99a8a007271ad04ece9294f072075a55472b6b1690734a036f4c0c2d1deb7/analysis/1414446816/ Scanning of the installer (which I may have renamed, I don't remember), Mp3tag_v2.65.exe, gives no positives in virustotal's old scan, from 10 hours ago: https://www.virustotal.com/en/file/d52a6e3a37b35188215f1307f1b6a8545256dd45b8bc4b3ae2fc57b54dde0adb/analysis/ Rescanning the installer by virustotal gives MBAM as the only one reporting a positive: https://www.virustotal.com/en/file/d52a6e3a37b35188215f1307f1b6a8545256dd45b8bc4b3ae2fc57b54dde0adb/analysis/1414449014/ The files are digitally signed by Florian Heidenreich on Oct 18, 2014, at 5:03:42 AM for the exe and at 5:03:52 AM for the installer exe. Neither file shows any modification according to Windows. So, either the file has magically changed without Windows knowing about it, or MBAM did something in its definitions to add it as a risk. I am assuming that the program is not doing anything it shouldn't do, i.e., that it hasn't been malicious all this time with MBAM being the first one to discover it. What is exceedingly peculiar is that I cannot find the original MBAM log reporting it as a positive when it was in ProgramFiles(x86). MBAM kept bugging me via systray for at least 30 minutes, but I was busy gathering information to report a false positive to Sophos, since its virus removal tool had suddenly decided that ipresetall.exe was a trojan,*** so I was ignoring MBAM for a while. Before restoring the file from quarantine, I went to an external drive to find the original installer, and put that in my downloads folder, which is the only place that I could find MBAM reporting either the installer or the program file, despite MBAM having been bugging me for at least half an hour about the exe in program files. I then scanned the installer file and, upon finding that virustotal thought it was safe, went ahead and restored the item from MBAM's quarantine. After it quarantines the file, MBAM cannot then find it itself: there are a couple of dozen entries like this in the protection log: Detection, 10/27/2014 4:16:02 PM, SYSTEM, HAL9000B, Protection, Malware Protection, File, Trojan.FakeMS.ED, c:\program files (x86)\mp3tag\mp3tag.exe, Quarantine Failed, 2, The system cannot find the file specified. , [cde61efba9d33ef8cad1d00856ab4ab6] [***You might take a look at ipresetall, since a number of vendors are starting to report it as a postive. Virustotal reports that 12 of 54 find it a threat, whereas Norton was the only one for a long time to think that it was evil. I finally got Norton to whitelist it a couple of months ago. If more vendors are finding it to be evil, you might very well also in the near future, unless you already have it whitelisted. See https://www.virustotal.com/en/file/485e79900bd33ae201f685834a7999d588e6909d7031b73dc344e8b783cbf871/analysis/; the file is available via a link on http://www.eightforums.com/network-sharing/18945-error-when-resetting-tcp-ip-stack.html.]
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.