HEUR:Trojan.Win32.DllHijacker.gen(Malwarebytes offline installer)

[ZarokNion]

I just tried to download the malwarebytes offline installer and kaspersky antivirus jumped me saying it was a virus.
here it is more detailed:
Event: A malicious object was detected.
User: DESKTOP-RHJ5VQ4\ZarokNion
User type: Active user
Application name: chrome.exe
Application path: C:\Program Files\Google\Chrome\Application.
Component: File Anti-Virus
Result description: Detected
Type: Trojan
Name: HEUR:Trojan.Win32.DllHijacker.gen
Accuracy: Partial
Threat level: High
Object type: File
Object Name: data0002.res

Object Patch:C:\Users\ZarokNion\Downloads\Unconfirmed 689164.crdownload

MD5: 80C2B6D87BE50EAA288C2981A85BA3E5
Reason: Expert analysis
Databases Release Date: Today, 10/20/2021 05:11:00 p. m.

[Porthos]

7 minutes ago, ZarokNion said:

I just tried to download the malwarebytes offline installer and kaspersky antivirus jumped me saying it was a virus.

Try this download.

Download the offline installer from : https://downloads.malwarebytes.com/file/mb4_offline

[ZarokNion]

I just tried to download the malwarebytes offline installer and kaspersky antivirus jumped me saying it was a virus.
here it is more detailed:
Event: A malicious object was detected.
User: DESKTOP-RHJ5VQ4\ZarokNion
User type: Active user
Application name: chrome.exe
Application path: C:\Program Files\Google\Chrome\Application.
Component: File Anti-Virus
Result description: Detected
Type: Trojan
Name: HEUR:Trojan.Win32.DllHijacker.gen
Accuracy: Partial
Threat level: High
Object type: File
Object Name: data0002.res

Object Patch:C:\Users\ZarokNion\Downloads\Unconfirmed 689164.crdownload

MD5: 80C2B6D87BE50EAA288C2981A85BA3E5
Reason: Expert analysis
Databases Release Date: Today, 10/20/2021 05:11:00 p. m.

[ZarokNion]

Descargué desde allí, quería saber si el archivo de acuerdo con lo que dice el escáner infectó mi PC.

[ZarokNion]

justo esto sucedió mientras descargaba el instalador, el antivirus me dijo que cuando reinicie eliminará el archivo pero cancelé la descarga, esto puede hacer que mi pc se infecte o el antivirus ya se encargó de ello?

[Porthos]

If you downloaded from the link I posted then it is a Kaspersky False Positive.

[ZarokNion]

ese es el mismo enlace, pero lo descargué por la mañana.

[Porthos]

Please continue in your other topic and please translate before posting.

Continúe en el otro tema y traduzca antes de publicar.

 

 

[Porthos]

User has topic in the correct section.

[ZarokNion]

ok.that's the same link, but I downloaded it in the morning.

[ZarokNion]

ok.that's the same link, but I downloaded it in the morning.

[Porthos]

1 minute ago, ZarokNion said:

ok.that's the same link, but I downloaded it in the morning.

 

6 minutes ago, Porthos said:

Continúe en el otro tema y traduzca antes de publicar.

 

 

 

[ZarokNion]

So it is not a risk ?, because I detected it while downloading that portable installer

[Porthos]

3 minutes ago, ZarokNion said:

So it is not a risk ?

No if you use the link I posted.

[ZarokNion]

https://community.kaspersky.com/para-usuarios-particulares-forum-para-usuarios-hispanohablantes-70/es-un-falso-positivo-21046

If it was, what a relief, here is what they answered me in Spanish, you can translate it into English

 

 

 

---

 

[ZarokNion]

one question, which is data0002.res

[Porthos]

Kaspersky and Malwarebytes have issues working together.

Please also refer to this support article which lists several known applications which conflict with the Web Protection in Malwarebytes currently, which includes Kaspersky.

.

[ZarokNion]

why does VBA32 say that malwarebytes is a virus?

VirusTotal - File - c213764fddefb3538e6bef4b46f3207228af26f21246a681032d94bc5bd70482

[Porthos]

1 hour ago, ZarokNion said:

why does VBA32 say that malwarebytes is a virus?

VirusTotal - File - c213764fddefb3538e6bef4b46f3207228af26f21246a681032d94bc5bd70482

This is also a False positive.

[Firefox]

Probably a false positive, plus it looks like it did not completely download, did you get it form this link:

https://downloads.malwarebytes.com/file/mb4_offline

[Porthos]

Just now, Firefox said:

Probably a false positive, plus it looks like it did not completely download, did you get it form this link:

Already asked in the other hijacked thread. Even asked for him to continue here.

 

[AdvancedSetup]

I have merged the posts to this topic

 

[ZarokNion]

I just realized that the md5 has changed when I download the file again, and the old md5 keeps saying it has virus and the new one is clean

[ZarokNion]

MD5:https://opentip.kaspersky.com/80C2B6D87BE50EAA288C2981A85BA3E5/

[ZarokNion]

 

if it is a false positive they should notify kaspersky about this