Trojan.FakeMS

[nick276]

Hi

 

I ran a full Malwarebytes scan and returned Trojan.Fake FM -

C:\WINDOWS\system32\dllcache\comres.dll (Trojan.FakeMS)

 

I quarantined this and rebooted

 

Scanned again and returned

 

C:\System Volume Information\_restore{26D1B5DE-BF52-464F-8FDB-2E21F2537808}\RP355\A0062699.dll (Trojan.FakeMS) -> No action taken.

 

Logs attached

 

Is this a threat and if so how do I get rid?

 

Any help on this please?

 

MBAM-log-2013-11-18 (22-04-32).txt

mbam-log-2013-11-18 (19-22-34).txt

[shadowwar]

This is a false positive and is fixed in the current database. Please update first then restore the files from quaritine and they should no longer be detected.

[nick276]

Hi shadowwar

 

I uploaded the latest updates before carrying out the first scan. Can you clafify the nest steps in more detail please?

[shadowwar]

You logs show: Database version: v2013.11.18.06

 

In database v2013.11.18.09 and above this should no longer be detected

 

1. perform manual update to update database

 

2. go to quarantine tab and select (checkmark) the trojan.fakems detections and hit the restore button.

 

Reboot for good measure and these will no longer be detected.

[nick276]

It's sorted. Thanks for your help!