Norton Flagged .tmp file after installation of new MBAM version

[MelissaGT]

Good evening,

 

This is my first post on this board so please let me know if I'm not giving enough information. I recently installed the latest version of Malwarebytes Premium (2.0.2.1012) on my Windows 8.1 system (64bit). I also run Norton 360 Premier, which is also up to date. Previously, the two programs had gotten along fine. However, today Norton flagged a .tmp file as a potential threat that seemed odd. Could this have something to do with compatibility with the new version of MBAM and Norton? 

 

I'm not one to go to sites that would potentially be dangerous (I'm sure everybody says that) and I've never had a virus in any of my systems before so I'm kind of at a loss. My computer is only several months old and is running perfectly fine. I haven't had any odd behavior to suspect hardware problems. After Norton quarantined the below, I ran full system scans with 360 and MBAM in safe mode and they came up clean. I also tried NPE. Any help would be greatly appreciated.

 

Infected file: Filename: 00025707.tmp

Threat name: Trojan.Pandex

Full Path: c:\program files (x86)\malwarebytes anti-malware\00025707.tmp

 

____________________________

 

 

 

Details

Very Few Users,  Very New,  Risk High

 

Origin

Downloaded from

 Unknown

 

Activity

Actions performed: Actions performed: 1

 

____________________________

 

 

On computers as of 

6/17/2014 at 5:58:31 PM

 

Last Used 

6/17/2014 at 6:00:33 PM

 

Startup Item 

No

 

Launched 

No

___________________________

Very Few Users

Fewer than 5 users in the Norton Community have used this file.

 

Very New

This file was released less than 1 week  ago.

 

High

This file risk is high.

 

Threat type: Virus. Programs that infect other programs, files, or areas of a computer by inserting themselves or attaching themselves to that medium.

____________________________

 

Source: External Media

 

Source File:

00025707.tmp

 

____________________________

 

File Actions

 

Infected file: c:\program files (x86)\malwarebytes anti-malware\ 00025707.tmp Removed

____________________________

 

 

File Thumbprint - SHA:

31ba5ad25c2e32a69bae979fe3211c88c95e6009b3e93ac54cec0aa3ed964314

File Thumbprint - MD5:

Not available

 

[MelissaGT]

Hello, I waited 2 days for a response per the forum guide. I just wanted to see if anybody had any insight. Thanks!

[MelissaGT]

Any thoughts on this? I haven't had a single problem since. I still think this was kind of odd...especially since trojan.pandex is a very old virus. Is it possible that Norton picked this up as a false positive on that MBAM .tmp file?

[JohnMWB]

I have experienced this twice now.  I suspect Norton is running a scan at the same time that Malwarebytes is doing an update.  The first time it happened I ran full system scans with all the scans on this site http://linustechtips.com/main/topic/90213-malware-removal-guide/

 

I have yet to find anything on the system and am thinking of adding an exclusion to Norton for it to scan.  No problems here either.

[daledoc1]

Perhaps this explains what you're seeing?
https://forums.malwarebytes.org/index.php?/topic/151400-norton-antivirus-detected-trojankillav-in-mwb-directory/
 
 

they are not malware. They are malware definitions that instruct some program how to detect malware. They arent from malwarebytes though. Best thing to do is submit some of those tmp files to norton and see if they recognize them.

https://forums.malwarebytes.org/index.php?/topic/151400-norton-antivirus-detected-trojankillav-in-mwb-directory/#entry846213

 
 
Cheers,

[MelissaGT]

I have experienced this twice now.  I suspect Norton is running a scan at the same time that Malwarebytes is doing an update.  The first time it happened I ran full system scans with all the scans on this site http://linustechtips.com/main/topic/90213-malware-removal-guide/

 

I have yet to find anything on the system and am thinking of adding an exclusion to Norton for it to scan.  No problems here either.

 

This just happened to me for the third time today. I think you may be right. I've posed the question to Norton and gotten no helpful insight. Each time this has come up I've submitted the information to them.