Possible false positives

[HerrUnbekannt123]

Hello all,

 

In the pasted I have used Kaspersky to protect my system and to check files in regards to malware.

Recently I have decided to use Malwarebytes Anti-Malware to check the files on my computer. Herefor I have bought the Pro version.

The first scan of my system has finished today. Unfortunately the program has found a couple of infected files. Most of the files are on my computer for over 4 years. In all these years Kaspersky hasn't found anything, the some result for couple of other online anti-virus programs.

 

Due to I hope that all detected files by Malwarebytes are false positives.

 

I would appreciate it if one of the experts can have a look at these files. I have packed all files into an rar archive with password (password: Virus). The rar archive is attached to this thread.

 

Thank you for your support!

 

Regards

[miekiemoes]

Hi,

 

I believe you forgot to attach the files so we can verify them

[HerrUnbekannt123]

Yes, rar archive hasn't been attached properly.

I switched the browser, I hope this time it will work.

New folder.rar

[miekiemoes]

Hi,

 

None of the files that we detect in your archive are false positives though. Some files in your archive weren't detected by us either, but those are ok.

What was mainly detected are PUP files (potentially Unwanted Program) and Riskware files (cracks/keygens).

[HerrUnbekannt123]

Hi,

 

None of the files that we detect in your archive are false positives though. Some files in your archive weren't detected by us either, but those are ok.

What was mainly detected are PUP files (potentially Unwanted Program) and Riskware files (cracks/keygens).

 

Thank you for the quick reply!

 

The result shows the following types:

- Adware.Vomba

- Backdoor.Bot

- Backdoor.Sdbot

- Malware.Packer.Gen

- Riskware.Tool.CK

- Trojan.Agent.CK

- Trojan.Downloader

- some kind of PUP

 

Have I understood you correctly, there is no virus, trojan,etc on my system, all these files are due to the file type unwanted/ risky? Even though some of them are named trojan.agent.ck or trojan.downloader?

[miekiemoes]

The PUP and Riskware.Tool.CK aren't real threats (which you had there the most) - the others, you should remove anyway.

[HerrUnbekannt123]

The PUP and Riskware.Tool.CK aren't real threats (which you had there the most) - the others, you should remove anyway.

 

I will remove these files.

 

Just for my understanding: Are these files real threats or have they been labeled due to the fact that these are keygens, cracks?

[miekiemoes]

Hi, What is not labeled as Riskware.Tool.CK and PUP are real threats and could harm your pc.

[HerrUnbekannt123]

Now I have another problem.

In the first place all files have been sent to the quarantine. According your post I have restored the files without threads. But after a restart ALL files have been deleted, both on the HDD and in the quarantine section in Malwarebytes.

Any solution to get back the files?

[miekiemoes]

Hmm, is there any possibility you selected to delete from quarantine instead of restore? Because it sounds like this was done - there is no other reason at all why this would happen otherwise.

Unfortunately if they are deleted from quarantine, you can't retrieve them back. If you want them back, you can just redownload your attachement in above

But personally, I wouldn't keep any of those files.

[HerrUnbekannt123]

No, I am 100% sure I pressed restore. Before I restarted the PC the files have been put back to the original folder, after the restart all files have been deleted.

 

Regarding the attachment:

I have renamed some of the files because some of them had the some name. I have to check if I can find the once I can keep.

[miekiemoes]

I suggest you don't keep any of those files.