alexs Posted July 11, 2020 ID:1393652 Share Posted July 11, 2020 Hello, I have just completed the scan, and got 1 file (20AEDF74.MSI) detected as "Malware.Generic.2191941786" (see details below) When I checked the properties of that file (20AEDF74.MSI) - it is a part of the installation package of the "CorelDRAW Graphics Suite 2019" with security signatures form Corel etc. Not sure if the detection is "TRUE" or "FALSE" positive by nature, but I would like to bring it you the attention in case it is a FALSE positive one. Thank you, ------------------------------------------------------------------------------------------------------ Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 11/07/2020 -Software Information- Version: 4.1.0.56 Components Version: 1.0.955 Update Package Version: 1.0.26691 Licence: Premium -System Information- OS: Windows 10 (Build 19041.329) CPU: x64 File System: NTFS User: System -Scan Summary- Scan Type: Threat Scan Scan Initiated By: Scheduler Result: Completed Objects Scanned: XXXXXXX Threats Detected: 1 Threats Quarantined: 0 Time Elapsed: X min, XX sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 1Malware.Generic.2191941786, C:\WINDOWS\INSTALLER\20AEDF74.MSI, No Action By User, 1000000, 0, 1.0.26691, dds, 00802568 Physical Sector: 0 (No malicious items detected) WMI: 0 (No malicious items detected) (end) Link to post Share on other sites More sharing options...
Staff blender Posted July 11, 2020 Staff ID:1393653 Share Posted July 11, 2020 Hello, Can you please zip and attach a copy of:C:\WINDOWS\INSTALLER\20AEDF74.MSIC:\WINDOWS\INSTALLER Copy/pasting the above path into an open explorer window will make it easier to access it. (this folder is a hidden system folder) That will take you right to the folder and make it easier to find the above file. Once found, zip it and attach here. Thanks Link to post Share on other sites More sharing options...
alexs Posted July 11, 2020 Author ID:1393654 Share Posted July 11, 2020 Hello Blender, Thank you for your response. I had a trial version of CorelDRAW Graphics Suite 2019 which was installed almost a year ago. When I got the detection today, I checked the file, determined that it was from Corel Suite, and uninstalled the software. Unfortunately, the concerned file is no longer available. Link to post Share on other sites More sharing options...
Staff blender Posted July 11, 2020 Staff ID:1393655 Share Posted July 11, 2020 Thank you for getting back. If you install it again and get the same detection, please try to get the file being detected. Link to post Share on other sites More sharing options...
alexs Posted July 11, 2020 Author ID:1393658 Share Posted July 11, 2020 Hello Blender, UPDATE: I have just installed CorelDRAW Graphics Suite 2020, and scanned by Malwarebytes. Another threat was detected - Malware.AI.2191941786, C:\WINDOWS\INSTALLER\F54BA6E.MSI, The file is a part of installation package for CorelDraw and has signatures from Corel. I have attached the detected file. Thank you, --------------------------------------------------------------------------------------- Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 11/07/2020 Scan Time: 07:07 -Software Information- Version: 4.1.2.73 Components Version: 1.0.979 Update Package Version: 1.0.26691 Licence: Premium -System Information- OS: Windows 10 (Build 19041.329) CPU: x64 File System: NTFS -Scan Summary- Scan Type: Threat Scan Scan Initiated By: Manual Result: Completed Objects Scanned: xxxxxxx Threats Detected: 1 Threats Quarantined: 0 Time Elapsed: 3 min, 5 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 1Malware.AI.2191941786, C:\WINDOWS\INSTALLER\F54BA6E.MSI, Physical Sector: 0 (No malicious items detected) WMI: 0 (No malicious items detected) (end) f54ba6e.zip Link to post Share on other sites More sharing options...
Staff blender Posted July 12, 2020 Staff ID:1393893 Share Posted July 12, 2020 Hello, The file is no longer available. Not sure what happened to it. Curious.. how big is this file? Thank you, Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now