Jump to content
JHall

False Positives: Adware.FileTour.BatBitRst

Recommended Posts

This morning when Malwarebytes did its daily scan I was surprised when it claimed that Adware.FileTour.BatBitRst had been detected in a handful of files, as I think that all of the files have been on my machine for some time without ever having been previously flagged. I suspect that the Malwarebytes threats database has just been updated and that this has introduced a new false positive. The files that were flagged were:

C:\\USERS\\JOHN HALL\\DOWNLOADS\\WRAR550.EXE
C:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\MICROSOFT\\NETWORK\\DOWNLOADER\\QMGR0.DAT
C:\\PROGRAMDATA\\APPLICATION DATA\\MICROSOFT\\NETWORK\\DOWNLOADER\\QMGR0.DAT
C:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\MICROSOFT\\NETWORK\\DOWNLOADER\\QMGR1.DAT
C:\\PROGRAMDATA\\APPLICATION DATA\\MICROSOFT\\NETWORK\\DOWNLOADER\\QMGR1.DAT
C:\\DOCUMENTS AND SETTINGS\\ALL USERS\\MICROSOFT\\NETWORK\\DOWNLOADER\\QMGR0.DAT
C:\\PROGRAMDATA\\MICROSOFT\\NETWORK\\DOWNLOADER\\QMGR0.DAT
C:\\DOCUMENTS AND SETTINGS\\ALL USERS\\MICROSOFT\\NETWORK\\DOWNLOADER\\QMGR1.DAT
C:\\PROGRAMDATA\\MICROSOFT\\NETWORK\\DOWNLOADER\\QMGR1.DAT

The first item is the installation file for WinRAR 5.50, an archive zipper/unzipper that I installed and have been using since February with no ill effects. The others were I believe downloaded as part of the monthly automatic Windows Update (I'm running Windows 7 32-bit).

Share this post


Link to post
Share on other sites

Hello,

This was an FP, but it was fixed 8 hours ago or so. Make sure you have a latest database. FileTour adware is using a BitsAdmin service to download its components so that's why you see QMGR files being detected, that is a part of BitsAdmin flush procedure.

Share this post


Link to post
Share on other sites

Thanks. The scan in question was done about 09:000 UTC, which must have been just before it was fixed.  I've just done another scan, and all is now fine.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.