nyrider Posted August 13, 2014 ID:866161 Share Posted August 13, 2014 Last week Malwarebytes found over 50k of pup.optional.adblocker detections during heuristics scanning. Ran 3 other programs which found no issues. Saw another post with similar issues and you posted that the newest database update would correct it. I waited a couple of days and installed latest update, still finds 2 detections... I don't have access to the pc at the moment for the log file, but I have a screen shot.c:\program files (x86)\stdole2.tlbHKLM\software\wow6432node\microsoft\windows\currentversion\shareddlls|c:\program files(x86)\std..... Can you help? Thank you,James Link to post Share on other sites More sharing options...
Staff shadowwar Posted August 13, 2014 Staff ID:866170 Share Posted August 13, 2014 hard to say without the full log but doesnt look like a false positive. Link to post Share on other sites More sharing options...
nyrider Posted August 13, 2014 Author ID:866252 Share Posted August 13, 2014 I was able to obtain the log.... Malwarebytes Anti-Malwarewww.malwarebytes.org Scan Date: 8/13/2014Scan Time: 7:35:51 AMLogfile: MalwareScan08-13-14.txtAdministrator: Yes Version: 2.00.2.1012Malware Database: v2014.08.13.03Rootkit Database: v2014.08.04.01License: TrialMalware Protection: EnabledMalicious Website Protection: EnabledSelf-protection: Disabled OS: Windows 7 Service Pack 1CPU: x64File System: NTFSUser: ******** Scan Type: Threat ScanResult: CompletedObjects Scanned: 511609Time Elapsed: 21 min, 44 sec Memory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: Enabled Processes: 0(No malicious items detected) Modules: 0(No malicious items detected) Registry Keys: 0(No malicious items detected) Registry Values: 1PUP.Optional.AdBlocker, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHAREDDLLS|C:\PROGRAM FILES (X86)\STDOLE2.TLB, 1, , [d5428442c4b7f83e94496c6d738f12ee] Registry Data: 0(No malicious items detected) Folders: 0(No malicious items detected) Files: 1PUP.Optional.AdBlocker, C:\Program Files (x86)\stdole2.tlb, , [d5428442c4b7f83e94496c6d738f12ee], Physical Sectors: 0(No malicious items detected) (end) Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted August 13, 2014 Root Admin ID:866259 Share Posted August 13, 2014 Well until Rich returns I'll just say that where that file is located is more than likely why it was flagged even if it was a good file.No files belong in the root folder like that. C:\PROGRAM FILES (X86)\STDOLE2.TLB If you look on all Windows computers regardless of XP, Vista, Windows 7, Windows 8, Server 2003, etc etc.. There are NO files in the parent root folder for that directory: C:\PROGRAM FILES (X86)That alone is reason enough to flag the file as a potential threat. You can upload the file to www. virustotal.com and have them scan it but as said even if it comes back clean it does not belong in that folder period. Link to post Share on other sites More sharing options...
Staff shadowwar Posted August 15, 2014 Staff ID:866835 Share Posted August 15, 2014 This is fixed and should no longer be detected. Thanks for reporting. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now