Possible false positive - Hummingbird Exceed file xperf.exe

[adaniel]

MW Bytes listed xperf.exe as Rogue.FakeHDD and I believe this to be a false positive.

In the attached zip file you will find the scan log and a copy of the questioned xperf.exe file.

The first scan was done with one definition set, but during the scan the mwb database was upgraded. The second scan is with the latests database and it picked up the original and the copy that I had on my desktop.

I believe it to be a false positive. Please verify.

Thanks.

false_pos.zip

[David H. Lipman]

I haven't used Exceed in a few years but if MBAM is detecting this, it is a definite False Positive as it is from the v8.0 Exceed suite.

For the Malwarebytes team: Exceed is a set of TCP/IP utilities for everything from X-Windows to TN5250 / TN3270.

[shadowwar]

Fixed in the next update.

[adaniel]

awesome. Thanks.