Is this causing my spam?

[ForbiddenFruit]

Or does is it a false positive?

Hi all,

The very helpful Community Feedback site suggested I ask this here as I've just run Malwarebytes and it's come up with this in the log:-

Files Detected: 1

C:\Users\HbM\Desktop\New Software\mpt\matchware.mindview.4.0.build.100.be-MPT.exe (PUP.Hacktool.Patcher) -> Quarantined and deleted successfully.

'From what I can see from the results at VirusScan here, more than one product detects matchware.mindview.4.0.build.100.be-MPT.exe as malicious: http://r.virscan.org...cd6be5d9337ace6

If I were you, I would ask about this on the Malwarebytes forum here: http://forums.malwar...hp?showforum=41

You will have to register before you can post.

They can help you determine whether or not it's a false positive result.'

I installed the software maybe yesterday or the day before and this morning my email has sent spam to everyone in my address book. Is this coincidence?

Many thanks,

FF

[DarkSnakeKobra]

It sounds as if you might be infected.

We cannot work on malware removal in this section of the forums, so please read below for assistance with cleaning your system.

IMPORTANT: Please do NOT use any temporary file cleaners unless instructed to do so - they can cause data loss, making it hard to recover your system.

PLEASE CHOOSE ONE OF THE FOLLOWING 3 OPTIONS:

OPTION 1: Free, one-on-one, expert assistance in the Malware Removal Forum.

OPTION 2: For paid users of MBAM PRO, free, one-on-one, expert assistance from MBAM support.

OPTION 3: Fee-based, one-on-one, expert assistance from Premium Support.

OPTION 1:

• Please print out, read and carefully follow the instructions in the "I'm Infected - What Do I Do Now?" article.
  
• If the infection has so crippled the computer that you cannot complete some or all of the steps, then just do the best you can and start a new topic as described below.
  

• Then please start a new post in the Malware Removal Forum.
  
• When starting your new post, please note the following:
  
• Please do NOT post in a topic started by someone else, even if their problem sounds similar.
  
• Please COPY/PASTE the requested logs into your post, rather than attaching them.
  
• Under options, please be sure to select "track this topic" and "immediate email notification", so you'll know when a helper responds.
  

• An authorized, trained malware expert will provide free, one-on-one assistance as soon as one becomes available.
  

• Please be patient - it may be 48 hours or more before a helper can assist you, especially when the forum is very busy.
  
• Please do NOT "bump" your topic or reply back to it for at least 48 hours.
  
• Doing so may cause your topic to be overlooked, as it will appear that you are already being helped.
  

OPTION 2:

Alternatively, as a paying customer, you can contact the help desk by filling out the form here.

OPTION 3:

If you would like to use the Malwarebytes Premium Services (comprehensive solutions to all your computer support needs from installation and set-up to troubleshooting and tune-ups), please go to our Premium Support site here.

Please be patient someone will assist you as soon as possible.

PS Please use the button or the message pane (instead of the Quote and MultiQuote buttons) when replying here & at the other forums. That will make your topic easier to follow.

[ForbiddenFruit]

Malwarebytes has already been run - complete scan and says it's quarantined the threat. Just checking I still need to do the above and to say, if I do, I can't print the instructions until the morning now.

I do need to know, as the MindView software was given to me by a client is whether it is definitely malware as I'll need to let the client know.

Many thanks

FF

[AdvancedSetup]

Hello FF

Please read the following post which will help us to help you determine if it is or not.

http://forums.malwarebytes.org/index.php?showtopic=3228

Thank you

[ForbiddenFruit]

Will do. It will be in the morning now though as it's getting late and it will take a while to run the scan. Do I post in here or start a new thread in the false positive section?

Many thanks

FF

[DarkSnakeKobra]

The false positive section.

[ForbiddenFruit]

Ummm, I've just run the scan as requested but of course it's clean, because the scan I ran yesterday found the PUP.Hacktool.Patcher and got rid of it. Is there anything else I can do, rather than just be grateful it's gone :-)

[LarkBea]

Can you remove the file from quarantine? If not, reinstall the software or extract the executable from the program you were given, then submit the file in question as a false positive as outlined above. Unfortunately, without the file to analyze, there is no way to determine whether or not it is infected.