Slew of Malware Found Today

[wdolson]

I'm running 4.5.2.157 with the virus signatures updated today (Jan 27, 2022).  On the daily scan it found a ton of what it thinks is malware in programs that have been on the computer for years.  Something might be off in the current signatures.

 

The first thing flagged was the EXE for VB6 (I need to support some old VB programs).  This was flagged as Malware.Heuristic.1006.  VB6 is a pain to work with, but it isn't malware.

Then there are another 58 items which all seem connected to a program called Fixgo, which is for repairing problems in iOS.  I had a problem with my iPhone some time ago and used it to correct the problem (I don't remember the details anymore, that's how long ago it was).  These are all flagged as PUP.Optional.ChinAd.  These is also one flag for dpint64.exe which is also flagged as the same type of PUP. 

 

Maybe this is a newly identified adware?  It doesn't look like it's going to hurt anything to allow the PUP.Optional.ChinAd to be quarantined (not anything I use very often), but I think the VB6 flag is a false positive.

[AdvancedSetup]

Hello @wdolson

Can you please post back the detection or scan log that shows these detections?

Thank you

 

[Porthos]

59 minutes ago, wdolson said:

This was flagged as Malware.Heuristic.1006

Please see here. But please also post the log.

 

Edited January 28, 2022 by Porthos

[wdolson]

1 hour ago, AdvancedSetup said:

Hello @wdolson

Can you please post back the detection or scan log that shows these detections?

Thank you

 

 

Took some effort to zip up the logs.  The OS wouldn't allow me to zip them up in the logs directory even as Administrator.

Logs.zip

[Porthos]

1 minute ago, wdolson said:

Took some effort to zip up the logs. 

All we needed was this.

You can find Scan and Protection logs within the Malwarebytes 4 program in the following location

 

 

RTP stands for Real-Time Protection and is where automatic protection operations would normally be logged

 

 

If you click on the View option you should get something similar to the following with other options available.

 

 

 

 

Thank you

[wdolson]

I saw that, but I didn't want to do that for 59 detections.  Exporting one it looks like it exports all detections from the most recent scan.

VB6Detection.txt

[Porthos]

19 minutes ago, wdolson said:

Exporting one it looks like it exports all detections from the most recent scan.

Yep.

See you already ignored VB6.exe. Turning off the setting I posted about should fix that issue.

Staff can now look into it with the provided info. 🙂

[shadowwar]

This was fixed earlier today. 

 

The vb6 file is no where i could find. could you zip that and attach it here? Strange i couldnt not find it anywhere for a file so old. 

Edited January 28, 2022 by shadowwar

[wdolson]

Sorry, I spaced this.  Too many things going on at once...

 

Here is the VB6.exe file

VB6.zip

[cli]

Thanks for the file, it will no longer be detected in 10 minutes.