ProtectTD Posted December 16, 2018 ID:1287480 Share Posted December 16, 2018 I'm not sure why but Malwarebytes flagged the C:\Windows\SYSWOW64\IASRECSTIN.dll file on my home PC as being infected with the Trojan.Banker malware. is it possible for someone to verify that this isn't a false positive? I have allowed Malwarebytes to quarantined the file until I find out for sure. Thanks in advance for your help. isiasrecstinfected.zip Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted December 16, 2018 ID:1287483 Share Posted December 16, 2018 This is a False Positive, please see here: Link to post Share on other sites More sharing options...
bashbish Posted December 16, 2018 ID:1287484 Share Posted December 16, 2018 I have exact same file that I quarantined. I rebooted and Re scanned and MWB flagged it again. (so it reappeared). Also, when I went to "Reports" there is no record of either scan. Link to post Share on other sites More sharing options...
bashbish Posted December 16, 2018 ID:1287491 Share Posted December 16, 2018 ran update of database. re scanned. no threats detected. MWB Staff said it was a false positive. should I take C:\WINDOWS\SYSWOW64\IASRECST.DLL out of quarantine.(does my system need this file ?) Link to post Share on other sites More sharing options...
Fatdcuk Posted December 16, 2018 ID:1287496 Share Posted December 16, 2018 Hi bashbish Yes it is safe to restore that file from quarantine. Link to post Share on other sites More sharing options...
ProtectTD Posted December 16, 2018 Author ID:1287510 Share Posted December 16, 2018 Thanks ! Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now