How can I confirm a false postives?

[groze]

I know those are false positives. The reason is they way I have my systems set up.

On windows xp sp3, I disabled the notification intentionally

On Drive D, windows 98se is installed. Malwarebytes doesn’t know that windows 98se is installed on drive D, so it thinks 888113.QFE is a Trojan. From reading it is a needed system file. I would still like to confirm this to be sure. I don't use the windows xp boot loader.

Malwarebytes Anti-Malware 1.61.0.1400

www.malwarebytes.org

Database version: v2012.04.04.08

Windows XP Service Pack 3 x86 FAT32

Internet Explorer 8.0.6001.18702

Greg Rozelle :: HOME [administrator]

5/29/2012 8:05:10 AM

mbam-log-2012-05-29 (09-14-23).txt

Scan type: Full scan

Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

Scan options disabled: P2P

Objects scanned: 235597

Time elapsed: 29 minute(s), 19 second(s)

Memory Processes Detected: 0

(No malicious items detected)

Memory Modules Detected: 0

(No malicious items detected)

Registry Keys Detected: 0

(No malicious items detected)

Registry Values Detected: 0

(No malicious items detected)

Registry Data Items Detected: 2

HKLM\SOFTWARE\Microsoft\Security Center|AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.

HKLM\SOFTWARE\Microsoft\Security Center|UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.

Folders Detected: 0

(No malicious items detected)

Files Detected: 1

D:\Windows\SYSTEM\888113.QFE (Trojan.FakeMS) -> No action taken.

(end)

[Firefox]

Hello and

You can report false positives =>> Right HERE

[groze]

Forum Deity. Thank You. You are right I should report the registy false postives. As far the 888113.QFE I want to make sure it is really a false postive, yes I know I need to update the database first, then do a rescan. I couldn't get Ad-aware to work on my system, it is way to slow. I do have low memory though. Malwarebytes seems to work & is pretty fast even for a full scan. If the registry false postives pops up after the update, I will report it in the false postive. I assume Malwarebytes picked the 888113.QFE because it doesn't look like the file is in it's default location.

[shadowwar]

I posted in your thread in fp forum. I assume with the updated database the qfe file is no longer detected?

[groze]

I posted in your thread in fp forum. I assume with the updated database the qfe file is no longer detected?

Sorry for the late reply. After the update the 888113.QFE was not flagged.