Jump to content

Adware DownloadAssistant Detected - SFARK


ArchieT

Recommended Posts

Hi.
I needed to decompress some soundfont .sf2 files (an audio format for samplers) that were in sfArk format.
This required a Windows file decompression utility that is no longer widely available, but I managed to get the installer file for it from WebArchive here:

https://web.archive.org/web/20071012013925/http://www.melodymachine.com:80/sfark.htm

I scanned the downloaded file using Avast and Malwarebytes - both said it was okay.

I then installed the sfArk utility program, ran it once, but did not use it.
I then did a boot scan with Avast - it did not detect a problem with the file.

The next day I ran a Malwarebytes Threat Scan, and it detected the following:

 

Threats: 1   PUPs: 0   PUMs: 0

Adware DownloadAssistant    File    C:\PROGRAM FILES\SFARK\SFARK.EXE

 

I opted to quarantine the file.

BTW, I am using a Samsung NC-110 netbook running Windows 7 Starter Edition.

What should I do now?
Should I delete the quarantined file?
Is it okay to uninstall the SFARK program using Windows ‘Programs And Features’ in Control Panel?

Thanks for your help.

 

Link to post
Share on other sites

Here is the log export:

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 7/2/21
Scan Time: 1:47 PM
Log File: a98588d8-db33-11eb-8b4c-e81132df006f.json

-Software Information-
Version: 4.4.0.117
Components Version: 1.0.1344
Update Package Version: 1.0.42524
License: Free

-System Information-
OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: SamsungNetbook

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 196864
Threats Detected: 1
Threats Quarantined: 1
Time Elapsed: 25 min, 20 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 1
Adware.DownloadAssistant, C:\PROGRAM FILES\SFARK\SFARK.EXE, Quarantined, 763, 950498, 1.0.42524, 0000000000000000000003EC, dds, 01314188, 041D0E1A407D5398C3B21F8440465814, 0B551D73F70DDDB79C6E77BCE52B1A04A0FD46DB31B5F2B82C4539A9E6CCAC8C

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)

 

Link to post
Share on other sites

2 hours ago, Atribune said:

Thank you for reporting this, it will be fixed in the next database update

 

I don't undertsand(?)

I'm not reporting anything - I would like to know what to do about the infected file.

Should I delete the quarantined file?

Should I uninstall sfark?

Thanks for your help.

 

Link to post
Share on other sites

  • Root Admin

Hello @ArchieT

The detection was a False Positive. There is nothing wrong with the file. If you want to continue to use it then please go ahead and restore the file from Quarantine.

If you want to go ahead and uninstall the program because you're done using it you can do that too and then if you like empty the quarantine.

I hope that has answered your questions, if not please let me know

Thank you

 

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.