FP eM Client

[John A]

 

FP on MailClient.exe, installed from https://www.emclient.com/download

File quarantined.

FP Tracker said "No scan detections were found (Total:2)" ??

 

 

[nikhils]

Hi @John A

can you please follow the forum post below and send us the actual fp zip file the tool generates:

 

[John A]

Failed

Scan results attached

FP Tracker yielded the following

==============================
 FP Tracker - Version 1.5.0.0
==============================

Selected Scan Report: C:\ProgramData\Malwarebytes\MBAMService\ScanResults\dfdd3ebe-c6fc-11e9-83be-c80aa97368fa.json

An error occurred!

Failed to create output Zip file.
Check C:\Users\scugt\AppData\Local\Temp\fp_tracker\log.txt for details.

Press the Enter key to exit.

 

C:\Users\scugt\AppData\Local\Temp\fp_tracker\log.txt says

2019-08-25 15:59:38:5938   INFO      - Logging started: C:\Users\scugt\AppData\Local\Temp\fp_tracker\log.txt.
2019-08-25 15:59:38:5938   INFO      - Box Drive upload is disabled (neither Box path exists).
2019-08-25 15:59:41:5941   INFO      - User did not pass 'ScanReport' parameter. Defaulting to latest scan report.
2019-08-25 15:59:41:5941   INFO      - Checking #0 scan report: C:\ProgramData\Malwarebytes\MBAMService\ScanResults\dfdd3ebe-c6fc-11e9-83be-c80aa97368fa.json
2019-08-25 15:59:41:5941   INFO      - Found 1 detection(s).
2019-08-25 15:59:41:5941   INFO      - Selected Scan Report: C:\ProgramData\Malwarebytes\MBAMService\ScanResults\dfdd3ebe-c6fc-11e9-83be-c80aa97368fa.json
2019-08-25 15:59:46:5946   INFO      - Successfully downloaded fixed.txt to C:\Users\scugt\AppData\Local\Temp\fp_tracker\fixed.txt.
2019-08-25 15:59:48:5948   INFO      - Successfully downloaded ignore.txt to C:\Users\scugt\AppData\Local\Temp\fp_tracker\ignore.txt.
2019-08-25 15:59:48:5948   INFO      - Finished processing detections.
2019-08-25 15:59:49:5949   ERROR     - Failed to create Zip file from C:\Users\scugt\AppData\Local\Temp\fp_tracker\tmp directory to C:\Users\scugt\Desktop\fp_tracker_2019-08-25_Forum_dfdd3ebe-c6fc-11e9-83be-c80aa97368fa.zip. Line 566. Exception calling "CreateFromDirectory" with "4" argument(s): "Could not find a part of the path 'C:\Users\scugt\Desktop\fp_tracker_2019-08-25_Forum_dfdd3ebe-c6fc-11e9-83be-c80aa97368fa.zip'.".
                                       at System.Management.Automation.ExceptionHandlingOps.CheckActionPreference(FunctionContext funcContext, Exception exception)
                                       at System.Management.Automation.Interpreter.ActionCallInstruction`2.Run(InterpretedFrame frame)
                                       at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)
                                       at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)
 

[LiquidTension]

Hi @John A,

Do you have Windows Controlled Folder Access enabled or other similar security software installed?

[John A]

Controlled folder access is off and no other security software installed

[LiquidTension]

Okay. Instead, please attach the C:\ProgramData\Malwarebytes\MBAMService\ScanResults\dfdd3ebe-c6fc-11e9-83be-c80aa97368fa.json file and we'll process the false-positive this way.

Thank you!

[John A]

Attached

dfdd3ebe-c6fc-11e9-83be-c80aa97368fa.zip

[LiquidTension]

Thank you!