Trojan.Agent.ED detected in Metatrader4 executable file

[Effluvium]

This morning suddenly and for no reason MalwareBytes is signaling me that  all MT4 "terminal.exe" files (They are MetaTrader4 executable files: For recall Metatrader is a platform to trade on line currencies and Forex markets).

So all my "terminal.exe" files are this morning infected with Trojan.Agent.ED
Very weird situation. So I could not open any of the 3 MetaTrader installed from 3 different brokers..

 

Strange: I think it is a False Positive Alert, I have restored these files quarantined, but it is still persist declaring them infected with this trojan.

 

I am joining these files may be someone could tell me if they are really infected. When scanning computers I have only these files quarantined. I could not upload it even it is 9 MB size

[miekiemoes]

Hi,

 

Without any files or logs, there's nothing we can do here, so please read the instructions here before reporting an FP:

https://forums.malwarebytes.org/index.php?/topic/3228-please-read-before-reporting-a-false-positive/

 

However, I believe this one has been fixed already, so please update your malwarebytes database and rescan and let me know if still detected.

[lukelow]

metatrader_falsepostivie.zipI have attached the log file as suffered from same issue since morning.

[miekiemoes]

This should have been fixed already. Please update the database to v2015.01.30.04 and let me know if this is still detected.

[Effluvium]

Malwarebytes is up todate at my end. The database and the engine.

 

Here is one link of terminal.exe file detected as infected by Trojan.Agent.ED

 

https://www.dropbox.com/s/kwzggdzcboqiom5/terminal.exe

[miekiemoes]

Hi,

 

Malwarebytes is up todate at my end. The database and the engine.

 

Please verify your database, because I cannot reproduce detection for that file here. Your database version should be 2015.01.30.04 or up (it was fixed in 2015.01.30.04)

[query323]

How has this been confirmed as a false positive and not a real virus?  Thanks.

[miekiemoes]

Because the file it detected was a clean file and not malware.

[query323]

Because the file it detected was a clean file and not malware.

Thanks for the confirmation.