Windows MSI installer being detected as trojan.emotet

[cwrightc84]

The files are attached.  Virus total detects nothing, I believe these are false positives.

Malware.zip

[TwinHeadedEagle]

Hello, 

This should be already fixed. Can you update your database and check if it is detected again? 

[cwrightc84]

Also here is the log:

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 1/17/19
Scan Time: 2:40 AM
Log File: 3b47bf74-1a2b-11e9-95fa-7085c267c023.json

-Software Information-
Version: 3.6.1.2711
Components Version: 1.0.508
Update Package Version: 1.0.8828
License: Premium

-System Information-
OS: Windows 10 (Build 17134.472)
CPU: x64
File System: NTFS
User: System

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Scheduler
Result: Completed
Objects Scanned: 308688
Threats Detected: 9
Threats Quarantined: 9
Time Elapsed: 4 min, 59 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 9
Trojan.Emotet, C:\WINDOWS\INSTALLER\21F293.MSI, Quarantined, [5860], [625360],1.0.8828
Trojan.Emotet, C:\WINDOWS\INSTALLER\21F29D.MSI, Quarantined, [5860], [625360],1.0.8828
Trojan.Emotet, C:\WINDOWS\INSTALLER\21F2A2.MSI, Quarantined, [5860], [625360],1.0.8828
Trojan.Emotet, C:\WINDOWS\INSTALLER\21F2A7.MSI, Quarantined, [5860], [625360],1.0.8828
Trojan.Emotet, C:\WINDOWS\INSTALLER\21F2CA.MSI, Quarantined, [5860], [625360],1.0.8828
Trojan.Emotet, C:\WINDOWS\INSTALLER\21F2D0.MSI, Quarantined, [5860], [625360],1.0.8828
Trojan.Emotet, C:\WINDOWS\INSTALLER\21F2DA.MSI, Quarantined, [5860], [625360],1.0.8828
Trojan.Emotet, C:\WINDOWS\INSTALLER\21F2DF.MSI, Quarantined, [5860], [625360],1.0.8828
Trojan.Emotet, C:\WINDOWS\INSTALLER\21F2F5.MSI, Quarantined, [5860], [625360],1.0.8828

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

[cwrightc84]

Confirmed, I restored the files and ran another scan.  They are no longer showing up as malicious, thanks!