Virus found in Malwarebytes files

[Owlcat]

I scanned my computer and found a virus and had to cancel it and removed it then later scanned again. Both times Malwarebytes detected a virus inside of it's own files, and, I'm unsure if it is a virus or a false positive. It was reported as a Spyware Agent found here C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\TMP\EXTRACTOR.EXE-K.MBAM and I'll put the scan result export as well. Please let me know if this is a virus reinstalling itself or just a false positive.

Virus Scan.txt

[cli]

Can you attach the file? Thanks.

[Owlcat]

Sorry, how do I find the file?

[Owlcat]

To clarify, so far the first time I scanned and had to cancel it said it deleted it when I rebooted it. Then it was there when I scanned again and I've rebooted again.

[Owlcat]

There's nothing in the tmp folder where it said it was located or in the quarantine folder.

[cli]

It's most likely from cleaning up a detection. If you encounter it again, you can delete it.

[Owlcat]

Does that mean it is a virus, I hadn't had a detection before that in quite a long while. Is this a virus or should I be concerned?

[Owlcat]

If it was from cleaning up a detection why was it there again when I scanned the second time? Also does that mean that there was a different virus if it isn't one?

[shadowwar]

This is from rootkit mode copying the file there so we can analyze it. the extractor.exe is somewhere else on your hard drive and malwarebytes copies it to the tmp directory to analyze it. Rootkit mode is not necessary and should only be used when there is an active infection we can not clean up. 

 

[Owlcat]

I was unaware of that someone had just told me to use it when I scanned a few years ago, sorry. So there was a virus? If so do I need to scan again without rootkit to get rid of it?

[shadowwar]

You have to find the extractor.exe someone on your hard drive and get us a copy of it. I doubt its a virus though.

the mbamservice.log located here:

C:\ProgramData\Malwarebytes\MBAMService\logs

 

might give us some more information

 

[Owlcat]

MBAMSERVICE.LOGI ran another scan after your last message without rootkits, I hope that doesn't mess it up but here is the service log.

[Owlcat]

Can the file be a different file type? I can't find a extractor.exe from file search when I looked. Please, is there anyway you could use the log to help locate it? I just really need to know if my computer was and is safe or not.

[cli]

Thanks for providing your MBAMServiceLogs. From your log I can determine that this was an FP and not malware (https://www.virustotal.com/gui/file/5b7ac20b08fa8f46ae228127a3da4220059665e80f62fab2b8a4c9f5809f3ac0/detection).