false postive trojan.p2p.worm ?

[Swizz]

identified by anti-rootkit today - downloaded from what I thought was reputable site - should be a "junk removal tool" :/

[Fatdcuk]

Hi Swizz,

 

Please can you zip and attach a copy of the file that is being detected to a reply.

 

Thanks in advance.

[Swizz]

sorry, original file rejected and then wasn't allowed to post again right away :/ - file now uploaded JRT.zip

[Fatdcuk]

Hi,

 

I can confirm that this is a clean (good) copy of the JRT Tool.

 

However I'm not seeing any detections by MBAR or MBAM of it.

 

Do you have a copy of the MBAR log where the detection is referenced that you can zip and attach to a reply.

 

Thanks in advance.

[Swizz]

log attached - thank you

mbar-log-2013-12-04 (09-11-08).zip

[Fatdcuk]

Thanks Swizz,

 

Looking into this now but the detection is safe to ignore as it is a F/p.

[Swizz]

add'l info (sorry I didn't include it previously): 

 

mbar prompted before the scan re: Registry value "AppInit_Dlls" has been found, which may be caused by rootkit activity - option for Yes/No - I chose "No" and the scan proceeded to completion w/o interruption