Drumerero Posted November 6, 2015 ID:1000251 Share Posted November 6, 2015 Greetings, I ran a scan via MBAM and there were two files detected containing Trojan Tracur. I scanned the files on Virustotal.com and on jotti.org and the Trojan was not detected. MBAM found two other PUPs, maybe not false positives, but they seem to belong to the ask Toolbar belonging to Avira or something. Should I quarantine and delete them? Regarding the Trojan Tracur detections these are the results from the online virus scanners: https://www.virustotal.com/de/file/362bf10edb8825839844f078c92b0e118f0a1a5615e6c77e2cf46fda76ede70e/analysis/1446851418/ https://www.virustotal.com/de/file/81052ba17c9f9939b50dfccf74332657dbf2f704db61f98fad4e2dc841c5d836/analysis/1446851024/ https://virusscan.jotti.org/de-DE/filescanjob/2d8djopxlr https://virusscan.jotti.org/de-DE/filescanjob/k63duksnpb MBAM scan file is attached. Thank you in advance. Link to post Share on other sites More sharing options...
David H. Lipman Posted November 6, 2015 ID:1000252 Share Posted November 6, 2015 Scan file was not attached. However, you are experiencing the same issue as in; Possible false positive We await Malwarebytes' personnel to correct the False Positive. Link to post Share on other sites More sharing options...
Drumerero Posted November 6, 2015 Author ID:1000253 Share Posted November 6, 2015 Oh, I'm sorry, I attach the file with this post. Thank you!mbam_scan_071115.txt Link to post Share on other sites More sharing options...
mbjoe Posted November 7, 2015 ID:1000283 Share Posted November 7, 2015 I am getting the same alerts on the files below: C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IUserCnv.dll and C:\Apps\M025R\engine32.cab Link to post Share on other sites More sharing options...
Deef Posted November 7, 2015 ID:1000285 Share Posted November 7, 2015 Here also. Most likely FPs. Log is attached.Files can't restored out of quarantine. They're marked for deletion on reboot (which I have done several times now) Link to post Share on other sites More sharing options...
Staff miekiemoes Posted November 7, 2015 Staff ID:1000298 Share Posted November 7, 2015 Hi, This will be fixed in next database update which will go out any minute.Thanks for reporting. Link to post Share on other sites More sharing options...
sidesz14 Posted November 7, 2015 ID:1000301 Share Posted November 7, 2015 Hi, This will be fixed in next database update which will go out any minute.Thanks for reporting. I'm getting also : Registry Values: 1Trojan.Tracur, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHAREDDLLS|C:\PROGRAM FILES (X86)\COMMON FILES\INSTALLSHIELD\PROFESSIONAL\RUNTIME\11\00\INTEL32\IUSER.DLL, 1, , [fed1bcbe721983b39471019d9b664bb5] Link to post Share on other sites More sharing options...
Staff blender Posted November 7, 2015 Staff ID:1000302 Share Posted November 7, 2015 v2015.11.07.01Please update to the above definition which has the fix for this false positive.It JUST went out so may take a couple more minutes before you can download the update.Thanks for reporting! Link to post Share on other sites More sharing options...
Ranulf Posted November 7, 2015 ID:1000387 Share Posted November 7, 2015 I just got one of these this morning. In a temp file for a program setup/installer (EasyTune6) that has been on the machine for months. "ISScript11.Msi" MbamScanNov7.txt Link to post Share on other sites More sharing options...
Staff shadowwar Posted November 7, 2015 Staff ID:1000465 Share Posted November 7, 2015 Please update and reboot if necessary. This should no longer be detected. Link to post Share on other sites More sharing options...
Ranulf Posted November 7, 2015 ID:1000504 Share Posted November 7, 2015 Thanks. Seems all good here on subsequent scans. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now