Jump to content
Chadj

TimberScan.exe

Recommended Posts

We use Timber Scan 300 by https://www.core-assoc.com/products/timberscan/

It installs on our accounting server and is executed at the workstations via desktop shortcut to the timberscan.NET.exe over mapped networked drive.

There is also a MSSQL Named Pipe connection configured in 32 bit ODBC Administrator at each workstation.

I've scanned the server NEt.exe file and everything checks out fine.  When double-clicking the desktop icon the local file is quarantined.

C:\Users\myaccount\AppData\Local\Spoon\Sandbox\TimberScan\3.8.6.40\local\stubexe\0xEF37104E112B0AD5\TimberScan.exe

This file only resides during program use. Once it's closed, only "C:\Users\myaccount\AppData\Local\Spoon\Sandbox\TimberScan\" remains with no files in the last folder .tree.

protection-log-2018-05-15.txt

mbam-log-2018-05-15 (14-02-23).txt

TimberScan.zip

Share this post


Link to post
Share on other sites

Hi,

Thanks for reporting.

This has been fixed since a few hours ago already, so please update your database, as this should no longer be detected.

Thanks!

Share this post


Link to post
Share on other sites

This is being blocked and quarantined again.  It seems to have showed back up as suspicious back in December.   Users started reporting today that they can't access Timberscan due to MBAM blocking and quarantine.

Share this post


Link to post
Share on other sites
1 hour ago, J_Johansen said:

This is being blocked and quarantined again.  It seems to have showed back up as suspicious back in December.   Users started reporting today that they can't access Timberscan due to MBAM blocking and quarantine.

Should be fixed again. Thanks for notifying us!

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.