werfault.exe system file

[exile360]

Please refer to the following two topics:

https://forums.malwarebytes.com/topic/224797-multiple-detections-werfaultexe/
https://forums.malwarebytes.com/topic/224799-werfaultexe-trojanservstart/

edit: I just ran a scan on my own rig and got the same detections, here's the log:

	Malwarebytes
www.malwarebytes.com
	-Log Details-
Scan Date: 3/13/18
Scan Time: 6:48 PM
Log File: 0402f340-2719-11e8-8beb-0028f836110d.json
Administrator: Yes
	-Software Information-
Version: 3.4.4.2398
Components Version: 1.0.322
Update Package Version: 1.0.4340
License: Premium
	-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Exile-PCII\Exile
	-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 234929
Threats Detected: 1
Threats Quarantined: 0
(No malicious items detected)
Time Elapsed: 1 min, 52 sec
	-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detect
PUM: Detect
	-Scan Details-
Process: 0
(No malicious items detected)
	Module: 0
(No malicious items detected)
	Registry Key: 0
(No malicious items detected)
	Registry Value: 0
(No malicious items detected)
	Registry Data: 0
(No malicious items detected)
	Data Stream: 0
(No malicious items detected)
	Folder: 0
(No malicious items detected)
	File: 1
Trojan.ServStart, C:\WINDOWS\SYSTEM32\WERFAULT.EXE, No Action By User, [136], [500192],1.0.4340
	Physical Sector: 0
(No malicious items detected)
	
(end)

Edited March 13, 2018 by exile360

[shadowwar]

this is in process of being fixed

 

[exile360]

The issue appears to be fixed now, thanks guys  

[shadowwar]

you have 1.0.4342 ?

 

[exile360]

Yes, that's my current database version (I kept checking for updates periodically while keeping an eye on the issue here on the forums).