hexaae Posted May 26, 2016 ID:1042150 Share Posted May 26, 2016 The old Windows 95 game Earthworm Jim Special Edition launcher WORMLOAD.EXE starts WORM.EXE (the actual game) that is wrongly recognized as a Trojan. The strange thing is that single file analysis from Malwarebytes detects no threat in WORMLOAD.EXE and WORM.EXE though... (???) Files attached. WORM.zip Link to post Share on other sites More sharing options...
thisisu Posted May 26, 2016 ID:1042151 Share Posted May 26, 2016 Hi and thanks for reporting. Can you attach your log please? I'm unable to reproduce the detection with the latest rules. A guide on how to obtain MBAM log can be found HERE. Thanks Link to post Share on other sites More sharing options...
hexaae Posted May 26, 2016 Author ID:1042154 Share Posted May 26, 2016 I see no log, but the popup window says: (see attached) Maybe the game launcher makes a copy of WORM.EXE to be launched from %TEMP%, and this gets detected as a threat? Link to post Share on other sites More sharing options...
thisisu Posted May 26, 2016 ID:1042155 Share Posted May 26, 2016 That's the reason Thanks, it will be fixed in the next update. Link to post Share on other sites More sharing options...
thisisu Posted May 27, 2016 ID:1042171 Share Posted May 27, 2016 Fixed in 2016.05.27.01 Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now