False Positive?

[kastroud]

Morning,

 

My search returned entries as shown in the log file.

 

I recently restored my laptop to factory defaults and it seemed unlikely to me to have picked up a Trojean in the time since.

 

Please advise on if this is a FP or not & what I should do.

 

 

Thanks very much,

 

 

log file txt (and attached Zip):

 

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2014.01.25.07

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Carlton :: ACER5920 [administrator]

25/01/2014 10:22:55
MBAM-log-2014-01-25 (11-43-59).txt

Scan type: Full scan (C:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 309097
Time elapsed: 49 minute(s), 42 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\ACER\EMPOWERING TECHNOLOGY\ELOCK\SERVICE\ELOCK.SERV.SERVICE.EXE (Trojan.Downloader.FR) -> Data: 1 -> No action taken. [3823c8f12753bd79e155de7535cbf907]

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 1
C:\Acer\Empowering Technology\eLock\Service\eLock.Serv.Service.exe (Trojan.Downloader.FR) -> No action taken. [3823c8f12753bd79e155de7535cbf907]

(end)
 

MBAM-log-2014-01-25 (11-43-59).zip

[Fatdcuk]

Hi kastroud,

 

Olease can you locate, zip and attach a copy of  Serv.Service.exe to a reply.

 

Thanks in advance.

[kastroud]

OK, thanks for looking:

 

I have attached a zip for:

C:\Acer\Empowering Technology\eLock\Service\eLock.Serv.Service.exe

 

 

Thanks

eLock.Serv.Service.zip

[Fatdcuk]

Thanks  kastroud.

 

Confirmed that this is a False Positive and i will get it fixed on the next update cycle.

[kastroud]

Cool nice one

 

Thanks for the help!