mumpy Posted January 9, 2012 ID:515088 Share Posted January 9, 2012 First of all, thanks for great software. I have been using Malwarebytes' Anti-Malware for some time, and it is now one of my trusted anti-malware software.Yesterday, I ran the full scan (which I do every weekend) and found following file as a infected.c:\Windows\winsxs\amd64_hpcisss.inf_31bf3856ad364e35_6.0.6001.18000_none_d59c6600292b9522\HpCISSs.sys (Trojan.FakeAlert)As you can see, this is part of window's side-by-side library for HP driver. I checked the file's digital signature, it is issued and certified by Microsoft. I did look through the web for more information, and I believe file size seems correct. Unfortunately, I could not verify the sha1 value to be sure. Now, there is still a possibility that it is disguised malware, and that's why I did not post this in "False Positive" section of forum.Can you please verify this? If it is indeed a malware, I will first try to remove with Malwarebytes' Anti-Malware. If it is a false positive, I will move this post (somehow) to False Positive forum.Attached is the scan log after running as developer mode (run "mbam /developer")Thank you Link to post Share on other sites More sharing options...
mumpy Posted January 9, 2012 Author ID:515092 Share Posted January 9, 2012 I forgot to attach the file. Here it is:mbam-log-2012-01-08 (15-01-06).txt Link to post Share on other sites More sharing options...
Staff shadowwar Posted January 9, 2012 Staff ID:515093 Share Posted January 9, 2012 This should of been fixed yesterday. Can you update then right click scan this folder:c:\Windows\winsxs\amd64_hpcisss.inf_31bf3856ad364e35_6.0.6001.18000_none_d59c6600292b9522\ Link to post Share on other sites More sharing options...
mumpy Posted January 9, 2012 Author ID:515096 Share Posted January 9, 2012 This should of been fixed yesterday. Can you update then right click scan this folder:c:\Windows\winsxs\amd64_hpcisss.inf_31bf3856ad364e35_6.0.6001.18000_none_d59c6600292b9522\It is still reporting to be infected. Perhaps, my software version is old? I am using 1.51.2.1300 with latest (just downloaded) database version.Should I update the software? Link to post Share on other sites More sharing options...
mumpy Posted January 9, 2012 Author ID:515098 Share Posted January 9, 2012 I just updated Anti-Malware to 1.60.0.1800 and its database definition. Unfortunately, it is still reporting infected. Link to post Share on other sites More sharing options...
Staff shadowwar Posted January 9, 2012 Staff ID:515127 Share Posted January 9, 2012 Ok can you please zip that file and attach it here please?Also what language is your os installed as? Link to post Share on other sites More sharing options...
Staff shadowwar Posted January 9, 2012 Staff ID:515131 Share Posted January 9, 2012 Can u update in 30 mins and rescan again we may have fixed this. Link to post Share on other sites More sharing options...
mumpy Posted January 9, 2012 Author ID:515148 Share Posted January 9, 2012 I believe the OS itself is English, but from control panel, it is set as Korean.I just updated the version, and it is still reported as infected one.Here is a copy of the file.ThanksHpCISSs.zip Link to post Share on other sites More sharing options...
Staff shadowwar Posted January 9, 2012 Staff ID:515330 Share Posted January 9, 2012 Can you update one more time and recheck? its not detected here currently. Link to post Share on other sites More sharing options...
mumpy Posted January 9, 2012 Author ID:515462 Share Posted January 9, 2012 I just updated, and now it does not report it as infected.I am glad it was indeed false positive.Thank you very much for your support, Shadowwar. Link to post Share on other sites More sharing options...
Staff shadowwar Posted January 9, 2012 Staff ID:515465 Share Posted January 9, 2012 Thanks for helping us fix it! Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now