Trojan.Agent.ED false or true

[Rai_03]

Hallo,

 

I just want to start Ccleaner today and MBAM Pro detected a Trojan.Agent.ED and put it into the quarantaine.

MBAM Pro just been updated v.2014.06.14.04

I am not able to check the file at virustotal because can’t find CCleaner.exe in E:Program Files\CCleaner

Is this detection a false true?

 

 

Thank you in advanced.

[shadowwar]

It is possible but i need something to go on. Can you reboot then go to quarantine tab in mbam and restore that file. Then submit to virustotal and paste the link here.

 

U may have to temporarily disable realtimes protection in mbam.

 

Was this the latest version of ccleaner? With the latest version i am unable to duplicate it here.

[Rai_03]

@ shadowwar,

 

Thank you for the quick replay.

I did reboot the computer and can not Restore the file, because as show on the screenshot the Restore (= Herstel) button is not activated.

I can only Delete all (= Verwijder alles).

 

The CCleaner map is empty, no CCleaner.exe present, so can’t tell you which version of CCleaner it was, I though it was the latest version, cause I get always a warning when there is a new update.

I am afraid I have to re-download Ccleaner. 

 

 

[shadowwar]

You have to put a checkmark in the box and hit the restore button.

 

the box under selecteer

[Rai_03]

@ shadowwar,

 

Oops  . . . I’m sorry.

 

Did Restore.

 

 

 

Then close MBAM Pro.

Then I go to CCleaner map and the CCleaner icon looked not “normal”.

 

 

When I right click on it want to look for the version via the properties, then is MBAM Pro very quick, the CCleaner icon is already disappeared.

And MBAM Pro put CCleaner already in the quarantaine.

 

[Rai_03]

Add some information:

 

When I right click on it want to look for the version via the properties, then is MBAM Pro very quick, ****** ,the CCleaner icon is already disappeared.

 

 

Just made a photo:

 

***** ,this pop-up show on the monitor for a few second, than the CCleaner icon is already disappeared.

 

 

 

 

[shadowwar]

Yes i said you would have to disable realtime protection / file system protection to restore the file.

so before you do this all again please disable mbam protection.

 

Thanks.

[Rai_03]

@ shadowwar,

 

Yes after disable the realtime protection / file system protection to restore the file, the result is the same.

 

 

The CCleaner icon is not as usually and disappeared as soon as I click on the CCleaner map.

 

 

 

I think I have to re-download CCleaner again.

 

 

[shadowwar]

u have to disable the protection and possibly reboot.

[Rai_03]

@ shadowwar,

 

I start the computer this morning & for sure I did disable MBAM Pro.

It’s still not possible to start CCleaner although CCleaner.exe is back in the map but with a not usually icon.

 

 

 

Downloaded a “new” CCleaner en did a pre-scan with MBAM Pro (always did with every download).

It is OK now, no warning from MBAM Pro.

You may close this case.

Thank you for your assistance     

 

[shadowwar]

ok well we are probably still false positiving what ever version you had. Would of been nice to find the file. Glad you are fixed though.