7z.exe False Positive?

[JoleFindsTheRogues]

I really think this is a false positive this is a legal executable of 7Zip Console

Here's the developers log :

Malwarebytes' Anti-Malware 1.39Database version: 2549Windows 5.1.2600 Service Pack 3
8/3/2009 12:03:19 PMmbam-log-2009-08-03 (12-03-17).txt
Scan type: Quick ScanObjects scanned: 92174Time elapsed: 5 minute(s), 23 second(s)
Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 1
Memory Processes Infected:(No malicious items detected)
Memory Modules Infected:(No malicious items detected)
Registry Keys Infected:(No malicious items detected)
Registry Values Infected:(No malicious items detected)
Registry Data Items Infected:(No malicious items detected)
Folders Infected:(No malicious items detected)
Files Infected:C:\WINDOWS\system32\7z.exe (Trojan.Agent) -> No action taken. [3857535134303627615642473748565261849084857078201961249115708970]

and here's the executable if you need it :

http://rapidshare.com/files/263182353/7z.exe

[Falkra]

Same here, but the 7z.exe file is detected only because it is located in system32. I have 7-zip installed, and 7z.exe's default location is inside program files\7-zip, this file was not flagged, so I had to duplicate it to system32 to have it detected, and only that copy was flagged.

Malwarebytes' Anti-Malware 1.39

Version de la base de donn

[nosirrah]

I think I can keep this detection and fix the FP , let me try something .

[JoleFindsTheRogues]

I think I can keep this detection and fix the FP , let me try something .

Seems like to be fixed with the new update

Malwarebytes' Anti-Malware 1.39

Database version: 2550

Windows 5.1.2600 Service Pack 3

8/3/2009 5:57:03 PM

mbam-log-2009-08-03 (17-57-03).txt

Scan type: Quick Scan

Objects scanned: 92108

Time elapsed: 5 minute(s), 34 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

[Falkra]

Seems like to be fixed with the new update

Same for me.

[nosirrah]

Nice , best of both worlds . Thanks guys .