Pjottr Posted September 16, 2012 ID:597693 Share Posted September 16, 2012 Quote from Daledoc1In order to get prompt attention from the devs, it would probably be best to follow his original advice and post the logs in the False Positives forum >>HERE<<. Thanks Daledoc1 for your advise,Can somebody on this forum tell me if the detected trojan find in Log dated 07 Sept is a false positive or not?Attached two filesmbam.exe /developer Run Sept 14 2012and the logfile with the detection, dated Sept 7 2012Thanks in advancePjottrmbam-log-2012-09-07 (18-44-46).rarmbam-log-2012-09-14 (21-27-43).rar Link to post Share on other sites More sharing options...
sUBs Posted September 16, 2012 ID:597698 Share Posted September 16, 2012 C:\Program Files\Vimicro\Vimicro USB PC Camera (VC0305)\tools\x86\vmdrv.exe (Trojan.Pirminay) -> Quarantined and deleted successfully.If not mistaken, you ran "mbam.exe /developer" after the file got quarantined and hence it resulted with no detections.Please de-quarantine the above file. Then zip/attach it to your next reply so that I may examine it closer. Link to post Share on other sites More sharing options...
Pjottr Posted September 16, 2012 Author ID:597751 Share Posted September 16, 2012 Thanks for your quick reply Attached the quarantined file Thanks a lot5629384414.rar Link to post Share on other sites More sharing options...
Pjottr Posted September 16, 2012 Author ID:597753 Share Posted September 16, 2012 The attached file in my reply to you was compressed being quarantined. I did not notice you asked to de-quarantine itBelow the de-quarantined file just as you askedAgain thanksmbam-log-2012-09-07 (18-44-46).txt Link to post Share on other sites More sharing options...
Pjottr Posted September 16, 2012 Author ID:597759 Share Posted September 16, 2012 Also attached as Rar. Sorry for this I am learning here how to deal with these thingsmbam-log-2012-09-07 (18-44-46).rar Link to post Share on other sites More sharing options...
sUBs Posted September 16, 2012 ID:597776 Share Posted September 16, 2012 Hello, please de-quarantine the file. Then have mbam update itself before rescanning. We shouldn't be detecting it now Link to post Share on other sites More sharing options...
Pjottr Posted September 17, 2012 Author ID:598128 Share Posted September 17, 2012 Thats what i just did But when I de-quarantined this time it the file was completely gone i.c It was not returned to its original location.If I understand well:Malwarebytes would return it to its original location if it is a false positive.If the file is a non false positive Malwarebytes would not return the file to its original location and delete it completely from the systemAnyway this what I found on the net about Malwarebytes.In my case one could say that is was malware since malwarebytes completely erased the file.I ran MB in the developers mode and no malicious items were found.I quess I have my answer to my question Link to post Share on other sites More sharing options...
sUBs Posted September 17, 2012 ID:598136 Share Posted September 17, 2012 Thats what i just did But when I de-quarantined this time it the file was completely gone i.c It was not returned to its original location.If I understand well:Malwarebytes would return it to its original location if it is a false positive.If the file is a non false positive Malwarebytes would not return the file to its original location and delete it completely from the systemHello, the file is clean.When asked to dequarantine, Malwarebytes WILL NOT delete the file.Since the file is gone now, we shall restore it via other means. Please download the attachment from this post. Extract the file to the location,C:\Program Files\Vimicro\Vimicro USB PC Camera (VC0305)\tools\x86\vmdrv.exe Link to post Share on other sites More sharing options...
Pjottr Posted September 17, 2012 Author ID:598221 Share Posted September 17, 2012 DoneThanks for your quick support.Appreciate thisRegardsPjottr Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now