wazer Posted January 2, 2013 ID:629866 Share Posted January 2, 2013 Hi there i have been a fan of mbam for many years and i knew that time it became popular that i had to buy it!Ever since i bought mbam years ago i have never got any problems with mbam but as the latest version with new blue logo it starts to ruin all my projects i have built in autoit and delete them ALL.Some files that i have made and published to friends and people of interrest for years is now a threat for mbam.2013/01/02 14:14:14 +0100 WAZER Administrator DETECTION D:\programmer\VoiceMix\VoiceMix.exe Trojan.Inject.AI QUARANTINE2013/01/02 14:46:41 +0100 WAZER Administrator DETECTION C:\Users\Administrator\Desktop\cspromod_aio_fix.exe Trojan.Inject.AI QUARANTINEIf files needed ill put them up. Link to post Share on other sites More sharing options...
nosirrah Posted January 2, 2013 ID:629870 Share Posted January 2, 2013 Please zip and attach any of these files to your next post. Link to post Share on other sites More sharing options...
wazer Posted January 4, 2013 Author ID:630285 Share Posted January 4, 2013 There you go. Link to post Share on other sites More sharing options...
wazer Posted January 4, 2013 Author ID:630287 Share Posted January 4, 2013 woops here it is. Link to post Share on other sites More sharing options...
Staff shadowwar Posted January 4, 2013 Staff ID:630292 Share Posted January 4, 2013 fixed in next update. thanks for reporting! Link to post Share on other sites More sharing options...
wazer Posted January 5, 2013 Author ID:630612 Share Posted January 5, 2013 fixed in next update. thanks for reporting!when you say fixed in next update does that only apply to those 2 files i just gave you? or is it in general now?. Because if i recompile the files with new fixes and changes ill have to report again? Link to post Share on other sites More sharing options...
Staff shadowwar Posted January 5, 2013 Staff ID:630644 Share Posted January 5, 2013 We removed the def that was hitting your files and some other autoit files. It should be ok now for these and other files. Let me know if there is any further problem. Link to post Share on other sites More sharing options...
wazer Posted January 6, 2013 Author ID:631096 Share Posted January 6, 2013 Thank you sir! Link to post Share on other sites More sharing options...
wazer Posted March 28, 2013 Author ID:662218 Share Posted March 28, 2013 Hello now its doing it again, false positive all my apps i made in autoit is gone again!? Link to post Share on other sites More sharing options...
wazer Posted March 28, 2013 Author ID:662219 Share Posted March 28, 2013 2013/03/29 00:00:52 +0100 WAZER Administrator DETECTION D:\programmer\VoiceMix\VoiceMix.exe Trojan.Agent.AI QUARANTINE Link to post Share on other sites More sharing options...
DarkSnakeKobra Posted March 29, 2013 ID:662252 Share Posted March 29, 2013 Just a suggestion to avoid future detections is to have MBAM ignore the project directories. The problem with any security software is that they often flag custom built programs. It just happens so you can't really do much about it other then reporting it which may be ineffective if you regularly recompile and release new versions. Link to post Share on other sites More sharing options...
Staff shadowwar Posted March 29, 2013 Staff ID:662426 Share Posted March 29, 2013 Being fixed right now.Sorry about this. Link to post Share on other sites More sharing options...
wazer Posted April 1, 2013 Author ID:663656 Share Posted April 1, 2013 Here we go again 2013/04/01 21:11:57 +0200 WAZER Administrator DETECTION C:\Users\Administrator\Desktop\wow window fix.exe Trojan.Banker.GC QUARANTINE Link to post Share on other sites More sharing options...
Staff shadowwar Posted April 1, 2013 Staff ID:663706 Share Posted April 1, 2013 I need the file please. Please zip and attach here.Thanks. Link to post Share on other sites More sharing options...
wazer Posted April 2, 2013 Author ID:664031 Share Posted April 2, 2013 I need the file please. Please zip and attach here.Thanks.I got 3 other issues now with malwarebytes..First: It does not continue to save the quarantine files after reboot, twice i tested it and it failed to keep them in quarantine ?.Second issue. When malwarebytes main menu window is open you cannot manuel right click on files and select scan. It will say mbam is already open ?, the scan window should not rely on if mbam main menu is open or not.Third issue: Which is almost the same as the second, when mbam window is in the background and you double click mbam tray icon, it will say that mbam is already open, why not just make it become active instead of this annoying popup all the time. Check if window is open then make it active if not open window etc...Anyways...I have uploaded some of the files that keep continue to be a threat for mbam "randomly" , i cannot upload all files. there's simply to many but its the same threat it log for. Link to post Share on other sites More sharing options...
Staff shadowwar Posted April 2, 2013 Staff ID:664066 Share Posted April 2, 2013 Thanks looking at this now. Those are all very good suggestions and you may want to post those in the suggestion forum. Link to post Share on other sites More sharing options...
Staff shadowwar Posted April 2, 2013 Staff ID:664070 Share Posted April 2, 2013 I am showing only the 1 file being detected. Will be fixed in the next update.As far as the quaritine before you restore if it was selected to autoremove you would have to reboot to restore it properly. Link to post Share on other sites More sharing options...
wazer Posted June 1, 2013 Author ID:685930 Share Posted June 1, 2013 Now your tageting autoit again, this time its the main program..http://wazer.dk/malw...hits-autoit.png Link to post Share on other sites More sharing options...
wazer Posted June 1, 2013 Author ID:685934 Share Posted June 1, 2013 Forgot the files.autoit3.zip Link to post Share on other sites More sharing options...
Staff shadowwar Posted June 1, 2013 Staff ID:685938 Share Posted June 1, 2013 We have added a bunch of files to the fp server to prevent these with normal autoit files. This will go with the bunch.Note: i just scanned with the latest db and i am not showing this detected. Can you update and recheck. Also Please include a dev scan log in the future as it helps us figure out whats going on.Thanks Link to post Share on other sites More sharing options...
wazer Posted June 1, 2013 Author ID:685984 Share Posted June 1, 2013 Im on the latest version/def...2013/06/01 11:12:00 +0200 WAZER Dennis Bang MESSAGE Executing scheduled update: Realtime2013/06/01 11:12:00 +0200 WAZER Dennis Bang MESSAGE Database already up-to-date2013/06/01 11:16:10 +0200 WAZER Dennis Bang DETECTION C:\Program Files (x86)\AutoIt3\AutoIt3.exe Trojan.Inject.AI QUARANTINE2013/06/01 11:17:00 +0200 WAZER Dennis Bang MESSAGE Executing scheduled update: Realtime2013/06/01 11:17:00 +0200 WAZER Dennis Bang MESSAGE Database already up-to-date2013/06/01 11:21:32 +0200 WAZER Dennis Bang DETECTION C:\Program Files (x86)\AutoIt3\AutoIt3.exe Trojan.Inject.AI QUARANTINE Link to post Share on other sites More sharing options...
Staff shadowwar Posted June 1, 2013 Staff ID:686031 Share Posted June 1, 2013 I still cannot duplicate this detection here.Can you please follow the instructions here in this post and run a scan in developer mode. This will give me a code so i can try to track down what may be doing this. Also showing what version database this happens too is very helpful.http://forums.malwar...?showtopic=3228I think you attached the wrong files.in the zip are au3info.exe and log shows C:\Program Files (x86)\AutoIt3\AutoIt3.exe Link to post Share on other sites More sharing options...
Staff shadowwar Posted June 1, 2013 Staff ID:686044 Share Posted June 1, 2013 nvm i downloaded and installed the app . Fixed next update. Link to post Share on other sites More sharing options...
wazer Posted June 1, 2013 Author ID:686048 Share Posted June 1, 2013 Lol sorry wrong files oO.. Anyways thanks for fixing this... ill try use the dev mode next time if it makes it much more easy for you guys Link to post Share on other sites More sharing options...
Staff shadowwar Posted June 1, 2013 Staff ID:686060 Share Posted June 1, 2013 Hopefully wont be a next time . I added every exe from the app to the filter fp server. We also have a good bunch of Legit Autoit files there so far. But as always any problems feel free and we will get corrected asap. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now