Jump to content
tedus987

false positive?

Recommended Posts

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2014.02.19.08

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16518
User :: SARAHNEW-PC [administrator]

19/02/2014 15:38:30
MBAM-log-2014-02-19 (17-40-45).txt

Scan type: Full scan (C:\|E:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 417815
Time elapsed: 32 minute(s), 46 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 2
C:\ProgramData\boost_interprocess (PUP.Optional.BoostInterProcess.A) -> No action taken. [17fdba24b8c2181ec829027cdd2529d7]
C:\ProgramData\boost_interprocess\F9212FAD64D6CE01 (PUP.Optional.BoostInterProcess.A) -> No action taken. [17fdba24b8c2181ec829027cdd2529d7]

Files Detected: 4
C:\ProgramData\boost_interprocess\F9212FAD64D6CE01\32464C59-F24E-4E70-BE2A-07256BBD9738-55736572-0 (PUP.Optional.BoostInterProcess.A) -> No action taken. [17fdba24b8c2181ec829027cdd2529d7]
C:\ProgramData\boost_interprocess\F9212FAD64D6CE01\32464C59-F24E-4E70-BE2A-07256BBD9738-55736572-1 (PUP.Optional.BoostInterProcess.A) -> No action taken. [17fdba24b8c2181ec829027cdd2529d7]
C:\ProgramData\boost_interprocess\F9212FAD64D6CE01\7DE1BB05-2C11-431E-88A4-4BC43F8586BF-55736572 (PUP.Optional.BoostInterProcess.A) -> No action taken. [17fdba24b8c2181ec829027cdd2529d7]
C:\ProgramData\boost_interprocess\F9212FAD64D6CE01\B2CBBFA0-9E58-474C-88C8-C01122A3474E-55736572 (PUP.Optional.BoostInterProcess.A) -> No action taken. [17fdba24b8c2181ec829027cdd2529d7]

(end)
 

boost_interprocess.zip

Share this post


Link to post
Share on other sites

Has this been verified as a false positive?

 

I've spent to much time (money) dicking around chasing this to keep it up. I see worm and virus info on the web related to this folder, but I don't have any of the other symptoms besides this file/folder as the OP.

Share this post


Link to post
Share on other sites

I was going to ask for help with removing PUP.Optional.BoostInterProcess.A, but it seems like I wont have to do it then.

 

Can someone explain what this is in layman's terms? Both what PUP.Optional.BoostInterProcess.A is, and why it's a false positive.

Share this post


Link to post
Share on other sites

I run Malwarebytes when I got in a short time ago. I just bought a mouse ( from £ land lol ) because the touch pad on the new acer Windows 8.1 was doing \my head in. it was dragging charms out and closing brower and tabs, geezzzzzz :angry2:  But I was a bit worried about the mouse putting anything on the machine, so done a quick scan, it showed

Folders Detected: 2
C:\ProgramData\boost_interprocess (PUP.Optional.BoostInterProcess.A) -> No action taken.
C:\ProgramData\boost_interprocess\20131114083528.485530 (PUP.Optional.BoostInterProcess.A) -> No action taken.

Files Detected: 2
C:\ProgramData\boost_interprocess\20131114083528.485530\Nobu64AgentService2.8.0.44 (PUP.Optional.BoostInterProcess.A) -> No action taken.
C:\ProgramData\boost_interprocess\20131114083528.485530\Nobu64TrayIcon2.8.0.44 (PUP.Optional.BoostInterProcess.A) -> No action taken.

............

I saved the log and run ccleaner, the Malwarebytes again. I t didn't show up in the last scan :)  does that mean I'm all good to go ?

Share this post


Link to post
Share on other sites

Does anyone know what these files are?  My daily scan caught them this morning and I removed them.  Were they important?  What program created/uses them?

Share this post


Link to post
Share on other sites

Hi,

 

It's ok if they are removed though, they are just created during install of certain programs (for some reason, a lot of PUP use these boost libraries). If they are removed, it won't affect anything and are actually safe to remove.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.