MBAR v2021.10.07.07 - Sysinternals Loadord.exe flagged as Trojan

[DaelRa]

I just ran an mbar scan with the latest database and it flagged loadord.exe in my sysyinternals folder as a Trojan.Downloader. I downloaded another copy of loadord.exe (‎28 ‎May ‎2016 16:42:41) from the sysinternals website and mbar flagged that too. I'm not sure where the logs are stored with mbar but I've zipped up loadord.exe and attach ed it here.

 

 

LoadOrd.zip

[cli]

I just scanned the file and had it reanalyzed on VT did not see a detection. It may have been fixed already. Can you update and scan again?

[DaelRa]

It's still flagging the file as suspect for me. Tried it with a freshly downloaded copy of LoadOrd.exe too (C:\LoadOrd.exe).

 

Just to make sure I downloaded the file to a different machine on a different network and ran MBAR on that with the same results.

 

 

 

 

[miekiemoes]

Hi,

I see you are using the MBAR version (beta) which has been implemented in our MBAM scanner already (rootkit scanning), so it makes sense that this older version still shows FPs. In either way, I found the culprit, so this has been fixed.

[DaelRa]

Thanks. I can confirm everything is fine now.