A .tmp file in malwarebytes was detected as a virus

[MadDemon64]

Yesterday I did a virus scan with Norton and it detected a file within malwarebytes as a virus, specifically a w32.tidserv virus.  I was told by Norton that this was a false positive, so I am starting this forum thread to tell people about this little issue.

[miekiemoes]

Hi,

 

I believe this is something similar as this case? Where the threatname might change?

https://forums.malwarebytes.org/index.php?/topic/165215-norton-finds-w32pilleuz-in-malwarebytes-temp-file/?hl=norton

 

In that case, it's rather a scan enumerating issue on Norton's end, as malwarebytes doesn't create such files there.

[MadDemon64]

Hi,

 

I believe this is something similar as this case? Where the threatname might change?

https://forums.malwarebytes.org/index.php?/topic/165215-norton-finds-w32pilleuz-in-malwarebytes-temp-file/?hl=norton

 

In that case, it's rather a scan enumerating issue on Norton's end, as malwarebytes doesn't create such files there.

Yea, pretty much that.  Same "w32.virusname detected", same "infected file: c:\...\malwarebytes anti-malware\randomnumber.tmp".  

But what does "scan enumerating issue" mean?  I am not familiar with that term.  And what do you mean by "malwarebytes doesn't create such files there"?  Does that mean that some other virus/malware is creating the files, or do you mean that the programmers don't create the file and it's just something malwarebytes did on its own?

[miekiemoes]

Malwarebytes doesn't create such tmp files in the malwarebytes anti-malware directory. I don't think these files are created by malware either after reading many posts regarding this on the Norton forums, eg: http://community.norton.com/en/forums/norton-360-premier-flagged-malwarebytes-tmp-file

To me, It rather looks like during Norton's scan, while it enumerates (which basically means scanning) this directory, has a hiccup here, because I don't think these files even exist there. If you would restore them from quarantine, don't think they will show back in the Malwarebytes directory.

[MadDemon64]

Malwarebytes doesn't create such tmp files in the malwarebytes anti-malware directory. I don't think these files are created by malware either after reading many posts regarding this on the Norton forums, eg: http://community.norton.com/en/forums/norton-360-premier-flagged-malwarebytes-tmp-file

To me, It rather looks like during Norton's scan, while it enumerates (which basically means scanning) this directory, has a hiccup here, because I don't think these files even exist there. If you would restore them from quarantine, don't think they will show back in the Malwarebytes directory.

Well I already cleared the entries of resolved actions list, and that apparently deleted all of the quarantined files.  But yea, I also did some searching and it really just looks like it confused a file meant to tell it what a virus looks like for said virus.  Glad to know it was just a fluke, but damn did it ever give me a scare.

[miekiemoes]

Yeah, there's nothing to worry about here

[MadDemon64]

Yeah, there's nothing to worry about here

Good, thanks.