Trend Micro Detects mbam-dor.exe as a virus

[DVader]

Hi...I just ran a full system scan with Trend Micro Internet Security Pro 2009 with latest virus definition and it detects mbam-dor.exe as a virus called RTKT_FAKE.Y. The file in question is located in the C:\Program Files\Malwarebytes' Anti-Malware\ folder... Trend has currently put the file in quarantine....should I be worried over this or could it be a false positive?

[DaChew]

http://www.virustotal.com/analisis/4584695...d82137495377b60

MY mbam-dor.exe was not infected

[DVader]

http://www.virustotal.com/analisis/4584695...d82137495377b60

MY mbam-dor.exe was not infected

So you think it's false positive? That link is for scan nearly a month old. What about this page: http://virscan.org/report/03e8e665055bd4f2...64c756ad96.html ?

[DaChew]

Just shows where trend has updated their definitions and as such, the file is picked up, it's a false positive

Contact trend

Another indication, why is trend the only one calling it?

[bargi]

Can confirm this one, we run Officescan at our company and was evaluating MWB and got the same this morning.

Just shows where trend has updated their definitions and as such, the file is picked up, it's a false positive

Contact trend

Another indication, why is trend the only one calling it?

[DaChew]

Jotti doesn't use trend

Scan taken on 02 Feb 2009 13:56:37 (GMT)

A-Squared Found nothing

AntiVir Found nothing

ArcaVir Found nothing

Avast Found nothing

AVG Antivirus Found nothing

BitDefender Found nothing

ClamAV Found nothing

CPsecure Found nothing

Dr.Web Found nothing

F-Prot Antivirus Found nothing

F-Secure Anti-Virus Found nothing

G DATA Found nothing

Ikarus Found nothing

Kaspersky Anti-Virus Found nothing

NOD32 Found nothing

Norman Virus Control Found nothing

Panda Antivirus Found nothing

Sophos Antivirus Found nothing

VirusBuster Found nothing

VBA32 Found nothing

[Figaro14]

I had the same thing happen. After Googling the virus name, I submitted it as a false positive to Trend Micro. Trend makes it nearly impossible to communicate with them. It's not a very customer service oriented company.

[GT500]

Jotti doesn't use trend

Does Trend run on Linux/Wine? Jotti's server was running Ubuntu the last time I checked.

[Maniac]

Trend Micro refuse to correct it. I sent them an e-mail, but they refuse to reason that they are not wrong.

[GT500]

Trend Micro refuse to correct it. I sent them an e-mail, but they refuse to reason that they are not wrong.

I'll let Marcin know. He can get cantankerous with them.

[TeMerc]

Already reported and TM rep replied here:

http://www.malwarebytes.org/forums/index.p...c=10716&hl=

[GT500]

Already reported and TM rep replied here:

http://www.malwarebytes.org/forums/index.p...c=10716&hl=

Thanks for the link Tom. It's good to know they are looking into it.