ESET Report

[LinkinForcer]

Hey guys,

So today I ran a scan with ESET and I constantly get 3 warnings everytime. One is for Win32/SmartFileAdvisor.B potentially unwanted program and the other two are for Win32/Bundled.Toolbar.Google.D potentially unsafe program. They are all tied back to the MBAM Service that is run by Malwarebytes. Even after cleaning them and ESET reporting that they were cleaned by deleting them they seem to get caught again by ESET during another scan after a restart or after shutting the computer down and then turning it back on. 

Are these files false positives? They didn’t show up until after I installed Google Chrome from what I can tell. 

Any advice on this matter will be greatly appreciated!

Note: A full scan with Malwarebytes comes up clean.

[Malwarebytes]

***This is an automated reply***

Hi,

Thanks for posting in the Malwarebytes 3 Help forum.

 

If you are having technical issues with our Windows product, please do the following: 

Spoiler

If you haven’t already done so, please run the Malwarebytes Support Tool and then attach the logs in your next reply:

NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

• Download Malwarebytes Support Tool
• Once the file is downloaded, open your Downloads folder/location of the downloaded file
• Double-click mb-support-X.X.X.XXXX.exe to run the program
  • You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
• Place a checkmark next to Accept License Agreement and click Next
• You will be presented with a page stating, "Welcome to the Malwarebytes Support Tool!"
• Click the Advanced Options link
  
• Click the Gather Logs button
  
• A progress bar will appear and the program will proceed to gather troubleshooting information from your computer
• Upon completion, click OK
• A file named mbst-grab-results.zip will be saved to your Desktop
• Please attach the file in your next reply. Click "Reveal Hidden Contents" below for details on how to attach a file:
  Spoiler

  To save attachments, please click the link as shown below. You can click and drag the files to this bar or you can click the choose files, then browse to where your files are located, select them and click the Open button.

  

   

  After posting your new post, make sure you click the Follow button near the top right of this page, and select the option "An email when new content is posted Change how the notification is sent" so that you're alerted by email when someone has replied to your post.

  

  

One of our experts will be able to assist you shortly.

 

If you are having licensing issues, please do the following: 

Spoiler

For any of these issues:

• Renewals
• Refunds (including double billing)
• Cancellations
• Update Billing Info
• Multiple Transactions
• Consumer Purchases
• Transaction Receipt

Please contact our support team at https://support.malwarebytes.com/community/consumer/pages/contact-us to get help

If you need help looking up your license details, please head here: https://support.malwarebytes.com/docs/DOC-1264 

 

Thanks in advance for your patience.

-The Malwarebytes Forum Team

[plb4333]

10 minutes ago, LinkinForcer said:

Hey guys,

So today I ran a scan with ESET and I constantly get 3 warnings everytime. One is for Win32/SmartFileAdvisor.B potentially unwanted program and the other two are for Win32/Bundled.Toolbar.Google.D potentially unsafe program. They are all tied back to the MBAM Service that is run by Malwarebytes. Even after cleaning them and ESET reporting that they were cleaned by deleting them they seem to get caught again by ESET during another scan after a restart or after shutting the computer down and then turning it back on. 

Are these files false positives? They didn’t show up until after I installed Google Chrome from what I can tell. 

Any advice on this matter will be greatly appreciated!

Note: A full scan with Malwarebytes comes up clean.

Hi. Was this installation part of another 3rd party software? If you want to remove the extra bloat of that toolbar used in internet explorer, I would run ADWCleaner. That will remove the excess that would trigger what you're getting in ESET

 

https://www.malwarebytes.com/adwcleaner/

Edited May 18, 2018 by plb4333

[LinkinForcer]

It shouldn’t have been a third party installer. As a matter of fact I have no idea where these files came from. The file path leads back to the MBAM services folder inside the install directory for Malwarebytes which is even more confusing. 

I’ll use the program you listed and see if it works.

[Firefox]

Lets try this new tool called Malwarebytes Support Tool to gather some logs.

1. Download Malwarebytes Support Tool
2. Once the file is downloaded, open your Downloads folder/location of the downloaded file
3. Double-click mb-support-X.X.X.XXXX.exe to run the program
   
   • You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
     
4. Place a checkmark next to Accept License Agreement and click Next
5. You will be presented with a page stating, "Welcome to the Malwarebytes Support Tool!"
6. Click the Advanced Options link
7. The Advanced Options page has two options, please choose one:
   
   • Gather Logs: Collects troubleshooting information from the computer using Check and Grab functionality. As part of this process, Farbar Recovery Scan Tool (FRST) is also run to perform a complete diagnosis of the computer. The troubleshooting information is saved to a file on the Desktop named mbst-grab-results.zip. This file can be added as an email attachment or uploaded to a forum post and will assist your Malwarebytes Support agent with troubleshooting the issue currently being experienced.
   • Clean: Performs an automated uninstallation of all Malwarebytes products currently installed to the computer and prompts to install the latest version of Malwarebytes for Windows afterwards. This process may require a reboot of the computer, which must be manually consented to.
     
8. To provide logs for review click the Gather Logs button
9. A progress bar will appear and the program will proceed to gather troubleshooting information from your computer
10. Upon completion, click OK
11. A file named mbst-grab-results.zip will be saved to your Desktop
12. Please attach the file in your next reply.
    

[dcollins]

Can you post a screenshot of the ESET detection please? I have a feeling this is ESET detecting some malicious files that we're gathering during our scans, but the detection report from ESET should help clarify that.

[LinkinForcer]

Not sure if this can help but it’s the most I can provide to you guys until I get home.

[plb4333]

3 hours ago, LinkinForcer said:

It shouldn’t have been a third party installer. As a matter of fact I have no idea where these files came from. The file path leads back to the MBAM services folder inside the install directory for Malwarebytes which is even more confusing. 

I’ll use the program you listed and see if it works.

This is just a added note, and I do recommend what Firefox mentioned, as well as dcollins, but I see this as having the source of issues coming from the files in mbam service folder, which are there as temporary files used by MBAM when scanning. So if ESET found these files and since the files in question are PUP's, it would make sense for ESET to flag. But the originating source is that your google toolbar had extra bloat with unnecessary addins called pups initiially

[LinkinForcer]

Im honestly thinking about uninstalling Google Chrome all together. Only reason I installed it was to use VidIQ. 

[plb4333]

6 minutes ago, LinkinForcer said:

Im honestly thinking about uninstalling Google Chrome all together. Only reason I installed it was to use VidIQ. 

You don't want to just uninstall the toolbar, instead of the whole browser? Did you try ADWcleaner? Just curious is all..:)

[Firefox]

@LinkinForcer lets wait until you can provide us the logs we requested to get a better picture of what's going on. Then once we review the logs we can direct you in the right direction.

Thanks,

[LinkinForcer]

Yeah that’s no problem. Like I said I don’t use Chrome for anything really. I only had installed to take advantage of one of their plugins.

[plb4333]

16 minutes ago, LinkinForcer said:

Yeah that’s no problem. Like I said I don’t use Chrome for anything really. I only had installed to take advantage of one of their plugins.

I know what you mean, I've done the same thing myself, that's the beauty of Chrome browser, tons of plugins!

[dcollins]

The picture above is what I assumed is happening. Malwarebytes is copying a suspected threat do some more scanning on it, and ESET is picking it up. You can safely ignore this error, and I'd recommend adding an exclusion for C:\ProgramData\Malwarebytes inside of ESET

[LinkinForcer]

Just an update guys, the Malwarebytes Adwcleaner seems to have done the job. It found 3 items. One was a registry key that was quarantined and the other two were the ask and aol toolbars from Google Chrome. It cleaned the items and now nothing shows on the scan with ESET. I'll do another test later and post the results before I go to bed.

[plb4333]

3 hours ago, dcollins said:

The picture above is what I assumed is happening. Malwarebytes is copying a suspected threat do some more scanning on it, and ESET is picking it up. You can safely ignore this error, and I'd recommend adding an exclusion for C:\ProgramData\Malwarebytes inside of ESET

This is what I assumed as well and mentioned it..