starr274 Posted August 9, 2013 ID:712754 Share Posted August 9, 2013 Since the database updated automatically today Malwarebytes has been spamming that its trying to Quarantine a Macromedia file and failing as its protected, so wondering if this is a case of another false positive where someone marked a wrong file as I've seen this in the past but with a diffrent system File name that seems to have been picked at random 2013/08/08 17:04:15 -0500 GATEWAYLAPTOPGS Geoffrey MESSAGE Scheduled update executed successfully: database updated from version v2013.08.07.08 to version v2013.08.08.072013/08/08 17:04:15 -0500 GATEWAYLAPTOPGS Geoffrey MESSAGE Starting database refresh2013/08/08 17:04:16 -0500 GATEWAYLAPTOPGS Geoffrey MESSAGE Stopping IP protection2013/08/08 17:04:17 -0500 GATEWAYLAPTOPGS Geoffrey MESSAGE IP Protection stopped successfully2013/08/08 17:04:35 -0500 GATEWAYLAPTOPGS Geoffrey MESSAGE Database refreshed successfully2013/08/08 17:04:35 -0500 GATEWAYLAPTOPGS Geoffrey MESSAGE Starting IP protection2013/08/08 17:04:40 -0500 GATEWAYLAPTOPGS Geoffrey MESSAGE IP Protection started successfully2013/08/08 17:28:38 -0500 GATEWAYLAPTOPGS Geoffrey DETECTION C:\Users\Geoffrey.GatewayLaptopGS\AppData\Local\Macromedia\Deployment\onjhidfn.dll Malware.Packer.T QUARANTINE2013/08/08 17:28:38 -0500 GATEWAYLAPTOPGS Geoffrey ERROR Quarantine failed: DeleteFile failed with error code 5 Link to post Share on other sites More sharing options...
sUBs Posted August 9, 2013 ID:712766 Share Posted August 9, 2013 C:\Users\Geoffrey.GatewayLaptopGS\AppData\Local\Macromedia\Deployment\onjhidfn.dll Hello, this does not look like a false postive. Please zip/attach the above file to your next reply. Link to post Share on other sites More sharing options...
starr274 Posted August 11, 2013 Author ID:713714 Share Posted August 11, 2013 How the folder was emptied when Mallwarebytes quarantined it and I can't find the Quarantine folder Link to post Share on other sites More sharing options...
Staff shadowwar Posted August 11, 2013 Staff ID:713772 Share Posted August 11, 2013 Malwarebytes should of quaritined the file to the quaritine tab. You can restore it to the original path then zip and upload here. But just from the file name i dont think this is a false positive. Link to post Share on other sites More sharing options...
starr274 Posted November 29, 2013 Author ID:759270 Share Posted November 29, 2013 Uploading the false positive as requested now that I've been able to determine that it wouldn't cause harm as best as I could, was going to wait for word from Macromedia but they have yet to reply after 3 months, could it be checkedonjhidfn false positive.zip Link to post Share on other sites More sharing options...
Staff nosirrah Posted November 29, 2013 Staff ID:759276 Share Posted November 29, 2013 This is not a false positive, your system is infected. Please run a scan, remove what is found and after reboot let us know if this detection is still there. Link to post Share on other sites More sharing options...
starr274 Posted December 11, 2013 Author ID:763183 Share Posted December 11, 2013 Ah I was confused as to why the program was asking for the file at startup if it wasn't needed, running the scan Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now