Howler Possible FP and other scan.

[FranClod]

Received this notice a few hours ago:

Copied and pasted from the log file:

 

2013/08/16 10:51:11 -0400       DETECTION    C:\Program Files (x86)\Howler\DogLua.exe    Trojan.Inject.NR    QUARANTINE

 

Before this, no notice. My antivirus scan shows no analomy. Could this be a false positive after the last update?

This is Project DogWaffler Howler.

 

Also:

 

Malwarebytes Anti-Malware (PRO) 1.75.0.1300
www.malwarebytes.org

Database version: v2013.08.16.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16660

Protection: Enabled

8/16/2013 1:50:44 PM
MBAM-log-2013-08-16 (13-56-21).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 297067
Time elapsed: 4 minute(s), 58 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CC8445A0-F7C7-42F4-A01F-BFE517676756} (PUP.Optional.Tarma.A) -> No action taken.

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 2
C:\ProgramData\InstallMate\{CC8445A0-F7C7-42F4-A01F-BFE517676756}\Setup.exe (PUP.Optional.Tarma.A) -> No action taken.
C:\ProgramData\InstallMate\{CC8445A0-F7C7-42F4-A01F-BFE517676756}\TsuDll.dll (PUP.Optional.Tarma.A) -> No action taken.

(end)
Please advise

[shadowwar]

Can you please zip and attach a copy of this file?

 

 C:\Program Files (x86)\Howler\DogLua.exe

[FranClod]

Here's the file requested. I only hope that it's not a malaware. ThanksDogLuaFile.zipDogLuaFile.zip

[shadowwar]

I am not showing this currently detected. We did have a fp for this def yesterday so its possible its already fixed.

 

The tarma ones if that is something u use u can add that to the ignore list.

[FranClod]

I am not showing this currently detected. We did have a fp for this def yesterday so its possible its already fixed.

 

The tarma ones if that is something u use u can add that to the ignore list.

Already took care of the tarma ones. Rescanned the DogLua.exe file and it's not malicious. Just a false positive. I also updated the database to the latest version (about 2 hours after my last and latest update).

Thank you.

[shadowwar]

No problem. Thanks for reporting.