rgb30b Posted February 15, 2015 ID:939878 Share Posted February 15, 2015 When running Sysinternals Process Explorer, it displays mbamscheduler as Worm.Runonce.Win32.1623. Also, and Im not sure if they're related but I have literally thousands of EventID logs:"Mbamchameleon Failed to obtain file name information - C01C0005". Link to post Share on other sites More sharing options...
Staff shadowwar Posted February 15, 2015 Staff ID:939879 Share Posted February 15, 2015 I assume this is from the virustotal integration. This is not our detection so there isnt much i can do about it. Do you know which vendor is reporting that on virustotal? Link to post Share on other sites More sharing options...
Staff shadowwar Posted February 15, 2015 Staff ID:939880 Share Posted February 15, 2015 This is a false positive it looks like by the company zillya. Not much i can do about it here. Will see if i can report to them. https://www.virustotal.com/en/file/251001a407d32ef22f64915eeffaaec229073c4549bf7d9d1d4209b7d15b4681/analysis/ Link to post Share on other sites More sharing options...
rgb30b Posted February 15, 2015 Author ID:939883 Share Posted February 15, 2015 Thats correct, Zillya. Sorry, I should've included that information. Do you know if this is this in any way related the the EventID logs..See attached.... Link to post Share on other sites More sharing options...
Staff shadowwar Posted February 17, 2015 Staff ID:940380 Share Posted February 17, 2015 That is most likely do to our self protections. You would have to follow up with support or the general forum possibly Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted February 17, 2015 Root Admin ID:940452 Share Posted February 17, 2015 Yes, this is a known issue with the Self Protection Module. Any file that it cannot verify a digital signature for it will flag like this.. I has been requested to change this behavior in an upcoming new release of the program. Not sure if it will be in the next one or not but it's on the queue for fix. Thanks Link to post Share on other sites More sharing options...
rgb30b Posted February 17, 2015 Author ID:940492 Share Posted February 17, 2015 Appreciate the assistance folks.... Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now