Gt-truth Posted September 28, 2016 ID:1064372 Share Posted September 28, 2016 I have this just now .... it’s bb flashback software Trojan.Agent.Trace, C:\Users\Public\Desktop\Download BB FlashBack P...lnk, , [1174c3b43367bb7bcba89234e2219769], Link to post Share on other sites More sharing options...
Staff blender Posted September 28, 2016 Staff ID:1064374 Share Posted September 28, 2016 Hello, Thank you for reporting this. It looks to be a false positive indeed. Adjustment will be made in the next database update. If you could please, can you zip the shortcut & attach here as well? If you quarantined it, you can de-quarantine the file by going to the History tab & choosing the item from the quarantine list & then clicking "restore". Thanks! Link to post Share on other sites More sharing options...
Staff blender Posted September 28, 2016 Staff ID:1064380 Share Posted September 28, 2016 v2016.09.28.06 has been released to fix this issue. Link to post Share on other sites More sharing options...
Gt-truth Posted September 28, 2016 Author ID:1064394 Share Posted September 28, 2016 (edited) hi blender here the file for checking ! https://www.virustotal.com/en/file/dede637fed03ddf3b47508b3c691192ed1afc60bfc622d282b235de3bec04a18/analysis/ New WinZip File.zip Edited September 28, 2016 by Gt-truth Link to post Share on other sites More sharing options...
Gt-truth Posted September 28, 2016 Author ID:1064396 Share Posted September 28, 2016 (edited) 1 hour ago, blender said: Hello, Thank you for reporting this. It looks to be a false positive indeed. Adjustment will be made in the next database update. If you could please, can you zip the shortcut & attach here as well? If you quarantined it, you can de-quarantine the file by going to the History tab & choosing the item from the quarantine list & then clicking "restore". Thanks! hi this my bad I hope from you to not removed this detection (it’s valid detection) check VT link thank you ! note : MBAM is only detected the desktop shortcut ( Which led to confusion.) and MBAM not detected the setup file itself ?! Edited September 28, 2016 by Gt-truth Link to post Share on other sites More sharing options...
Staff blender Posted September 28, 2016 Staff ID:1064428 Share Posted September 28, 2016 Hello again, I have looked at the files you uploaded. Thank you for them. We'll be adding detection for the file you submitted. The shortcut itself is not really malicious in itself though since a legit installer (that is not an adware bundler) could very well create a shortcut like this as well. Link to post Share on other sites More sharing options...
Gt-truth Posted September 29, 2016 Author ID:1064527 Share Posted September 29, 2016 (edited) hi by the way the C:\Users\Public\Desktop\Download BB FlashBack P...lnk, , "desktop shortcut" was created on the desktop by run "BB FlashBack Pro 5.0.0.exe file" which is a fake shortcut linking to "BB FlashBack Pro 5.0.0.exe file" in download folder so my anti-virus have block this BB FlashBack Pro 5.0.0.exe file before installed any thing ! and malwarebytes anti-malware have detected the shortcut only for the moment ! the fake BB FlashBack Pro here which is why mbam to flagged https://postimg.org/image/fmzzm2r99/ the real BB FlashBack Pro here https://postimg.org/image/chfdvv8n1/ Edited September 29, 2016 by Gt-truth Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now