JMJ Posted April 6, 2009 ID:70922 Share Posted April 6, 2009 This got flagged as a trojan on one of my computers, however scanning on a second comes up clean.Both computers have current definitions.Where do I go from here, to get you guys the info you need, is there a way I can lookup why the definition was matched?Thanks Link to post Share on other sites More sharing options...
JMJ Posted April 6, 2009 Author ID:70928 Share Posted April 6, 2009 That should be c:\program files\common\helper.sig Link to post Share on other sites More sharing options...
nosirrah Posted April 6, 2009 ID:70934 Share Posted April 6, 2009 http://www.malwarebytes.org/forums/index.php?showtopic=3228We need a little more info . Link to post Share on other sites More sharing options...
JMJ Posted April 6, 2009 Author ID:70936 Share Posted April 6, 2009 http://www.malwarebytes.org/forums/index.php?showtopic=3228We need a little more info .Is there a way to run /developer mode scan of just a single file?Do You want the one where the file was identified as trojan or as clean or both? Link to post Share on other sites More sharing options...
nosirrah Posted April 6, 2009 ID:70947 Share Posted April 6, 2009 Sorry , that is not how it works . The log generated will have the info we need . Link to post Share on other sites More sharing options...
JMJ Posted April 7, 2009 Author ID:71155 Share Posted April 7, 2009 Sorry , that is not how it works . The log generated will have the info we need .I didn't see any extra information in the logfile using mbam.exe /developer is there a way to make sure I ran it correctly?I would guess that since the file isn't flagged when scanned on another computer and it isn't a win32 application according to a couple of sandboxes it is being flagged by a heueristic of some sort Link to post Share on other sites More sharing options...
nosirrah Posted April 7, 2009 ID:71165 Share Posted April 7, 2009 The info is crypted and not human intelligible , please just follow in the instructions here :http://www.malwarebytes.org/forums/index.php?showtopic=3228and post the log that is generated . Link to post Share on other sites More sharing options...
JMJ Posted April 7, 2009 Author ID:71267 Share Posted April 7, 2009 The info is crypted and not human intelligible , please just follow in the instructions here :http://www.malwarebytes.org/forums/index.php?showtopic=3228and post the log that is generated .Just tried to replicate results with 1.36 and file scans clean Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now