Malicious items: Inno Setup.exe 51.34.0.0 and Beyon Compare Merger CLSID

[Benjee]

Recent update of MalwareBytes (Free Version 1.34 and Database Version 1902) reports

1) An Inno Setup.exe version 51.34.0.0 which is used to extract the compress bin files as malicious item. I have been using InnoSetup to create installation package which provides the Setup.exe version 51.34.0.0 from Inno software. I don't think it is a malware. Probable some malware may use that kind of Inno setup file to install malicious files.

2) Some registry entries of Beyon Compare Merger as malicious items. I think that also a wrong alarm. I have been using Beyon Compare Merger for a long time.

Here are the logs:

Malwarebytes' Anti-Malware 1.34

Database version: 1902

Windows 5.1.2600 Service Pack 3

3/26/2009 1:03:57 PM

mbam-log-2009-03-26 (13-03-47).txt

Scan type: Full Scan (D:\|)

Objects scanned: 86546

Time elapsed: 1 minute(s), 21 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 3

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

HKEY_CLASSES_ROOT\bcmerge.dochostuihandler (Trojan.BHO) -> No action taken. [4054423730922071196767681722142117697114181869191426212222141717181721676826202

3717194]

HKEY_CLASSES_ROOT\CLSID\{3f2bbc05-40df-11d2-9455-00104bc936ff} (Trojan.BHO) -> No action taken. [4054423730922071196767681722142117697114181869191426212222141717181721676826202

3717194]

HKEY_CLASSES_ROOT\AppID\{3f2bbc05-40df-11d2-9455-00104bc936ff} (Trojan.BHO) -> No action taken. [4054423730922071196767681722142117697114181869191426212222141717181721676826202

3717194]

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

D:\ESPCBT\Setup.exe (Rogue.VirusDoctor) -> No action taken. [2023227021672626252518192070707120262222662171671925662667702620]

[nosirrah]

These should all be fixed .