False positive: Spyware.LokiBot C:\PROGRAM FILES\WINPCAP\RPCAPD.EXE

[ronzie009]

VirusTotal shows MBAM as the only positive (1/67) on this file.  I don't know exactly when this file was installed because the latest Windows 10 update caused the add/remove programs control panel to now show the date of the update as the install date for all applications installed at that time.

Windows 10 Home version 1803 OS build 17134.1

 

2018-05-04_scan_report.txt

rpcapd.rar

[miekiemoes]

Thanks,

This is a false positive indeed and will get fixed in next database update.

Thanks for reporting!

[Wall46]

Got the same false positive this night. Win7X86prof this file belongs to WireShark, using it since 2012(?)

THX for your work

[miekiemoes]

Yes, the next update will have this fixed, which should go out in 20 mins (or so).

This will be addressed in database update 

MBAM2 Version: v2018.05.04.06
MBAM3 Version: 1.0.4982

[Latitude]

Hi,
So, I have not to take any action?

 

[miekiemoes]

Correct, as this was a false positive. This has been fixed in a meanwhile, as the update just went out:

MBAM2 Version: v2018.05.04.06
MBAM3 Version: 1.0.4982

[Latitude]

Great. Thank you Mikiemoes

 

[Wall46]

THX a lot for updating. It works.

I'll send you a virtual belgican schocolade and a bag of belgican Pommes Frites.

I could die for that

Saludos y Suerte (Greetings and luck, a nice Pagarugayan wish from Paraguay (PY))

Wolfgang

[miekiemoes]

You're most welcome. Guess I'll have Pommes Frites with Chocolate tonight!