MBAM3 Firefox.exe False Positive???

[mister_honey]

I installed MBAM3 on 5/09 and immediately received this Trojan.Agent.E threat warning: C:\USERS\MIKE\FIREFOX.EXE

Per my computer tech, my quarantine of this file somehow fouls the permissions for Firefox 53.0.2 as well as IE, so neither browser functions.

He corrected the issue, but my daily scan still reports the Trojan.Agent.E threat. It appears that quarantine is not an option.

ESET NOD32 does not find Trojan.Agent.E on my computer, so we suspect a false positive.

Comments?  Shall I ignore the Trojan.Agent.E warning?

Thanks!

Mike

firefox.txt

[shadowwar]

This is not the correct path where firefox.exe should be.

 

C:\USERS\MIKE\FIREFOX.EXE

Most often when its located in userroot like here its often malware.

It should be located here:

C:\Program Files (x86)\Mozilla Firefox\firefox.exe

or

C:\Program Files\Mozilla Firefox\firefox.exe

Can you please zip the file that is being detected and attach it here so i can have a look?

An alternative would be to submit it to virustotal.com and paste the link here to the report.

 

 

[mister_honey]

The zipped file is attached.

Mike

firefox.zip

[shadowwar]

This file came from that path directly?

This file is broken like mbam tried to quarantine it and it wont run in its current state. However fixing the file it is the valid firefox file.

Would be safe to ignore just very strange that you have it running from there.

 

 

[mister_honey]

Yes, I copied that file directly from C:\USERS\MIKE\FIREFOX.EXE

I will ignore the warning and thanks so much for your help with this!

Mike

[shadowwar]

You can add it to the malwarebytes exclusion list and no longer be alerted.