Jump to content

MP3Collector.exe - FP


daTerminehtor
 Share

Recommended Posts

Protection module continues to flag the above file.

Each time Windows starts (XP SP3) starts, and upon starting the application, a MBAM popup occurs flagging the file as being malicious.

Note, this does NOT occur upon a scan, and so nothing shows up in a log (see below).

Further, despite my adding the file to Ignore, nothing shows up under the Ignore section either.

Malwarebytes' Anti-Malware 1.40

Database version: 2652

Windows 5.1.2600 Service Pack 3

8/19/2009 12:27:20 PM

mbam-log-2009-08-19 (12-27-20).txt

Scan type: Quick Scan

Objects scanned: 99996

Time elapsed: 4 minute(s), 45 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

As an aside, shame to see a fine app changing for the worse (IMO). Adding IP protection is just asking for trouble. Particularly since HostsMan already addresses this, and its free.

Link to post
Share on other sites

  • Staff

Hi,

Please attach the file MP3Collector.exe to your next post.

Thanks.

As an aside, shame to see a fine app changing for the worse (IMO). Adding IP protection is just asking for trouble. Particularly since HostsMan already addresses this, and its free.
Maybe you don't like the IP protection, but there are a lot of others who really love this new feature and now feel much secure because of this. It still needs some finetuning since it's a new feature.

If you don't like the IP Protection, you can disable it. :(

Link to post
Share on other sites

Hi,

Please attach the file MP3Collector.exe to your next post.

Thanks.

Maybe you don't like the IP protection, but there are a lot of others who really love this new feature and now feel much secure because of this. It still needs some finetuning since it's a new feature.

If you don't like the IP Protection, you can disable it. :(

exe is over 5mb in size... over 3mb when compressed. I've uploaded to rs... here's the link and hash.

http://rapidshare.com/files/269188976/MC.rar.html

MD5: 309960292ED5DD199BA6D710FA9B8DB2

Please let me know when you have it so I can kill the link.

Posting on Collectorz site...

http://www.collectorz.com/phpbb2/viewtopic...3f153f37a4b7e95

Further, MBAM identifies the file as the Rogue.AstrumAntiVirus

I've been using Collectorz.com products for over 8 years. I can tell you there is no 'crap' in their exe.

Thanks for the prompt attention.

Ya, I'm just whining about have to disable IP Protection upon EVERY startup, rather than an internal or registry setting. :(

Link to post
Share on other sites

  • Staff

Hi,

Thank you for the file. I've corrected this detection. Please use the update feature in mbam to download the latest updates.

Then reboot and rescan again. Let me know if that solved it.

Extra note, this was actually an old detection, so not sure why it was never reported before as this already exists since february 2009.

This FP could have been fixed much earlier if it was reported. :(

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.