PAYLOAD.VSIX and NEWTONSOFT.JSON.DLL -Trojan.Crypt detected

[Envy14]

Hello Guys,

today I scanned my 2 laptop devices, Malwarebytes found 6 various files in Visual Studio related folders named payload.vsix ,and with the full scan Malwarebytes detected another 8 files also in the visual studio related folders named NEWTONSOFT.JSON.DLL

is this a trojan or a Potential false positive?

 

in the attachment, you will find the log file.

Thanks in advance.

NEWTONSOFT.JSON.DLL.txt payload.vsix.txt

[Porthos]

6 minutes ago, Envy14 said:

Thanks in advance.

This has been fixed in version 1.0.50933 on MB4. Please update and rescan. Also restore from quarantine.

[Envy14]

27 minutes ago, Porthos said:

This has been fixed in version 1.0.50933 on MB4. Please update and rescan. Also restore from quarantine.

So, does that mean it is a false positive? are these files safe and not malicious?

[Porthos]

2 minutes ago, Envy14 said:

So, does that mean it is a false positive? are these files safe and not malicious?

Yes, that is what  fixed around here indicates. It was a FP.

[LWB]

Same issue here. My version is up to date. Scan results attached.

scan-results.txt

[Porthos]

3 minutes ago, LWB said:

Same issue here. My version is up to date. Scan results attached.

It is out of date according to your log. Update Package Version: 1.0.50931 The fixed version is 1.0.50933 or newer.

[LWB]

1 minute ago, Porthos said:

It is out of date according to your log. Update Package Version: 1.0.50931 The fixed version is 1.0.50933 or newer.

 

[Porthos]

@LWB

Please clear your hubble cache by doing the following:

1. Click on the Malwarebytes icon in the system tray
2. Select "Quit Malwarebytes"
3. Navigate to %PROGRAMDATA%\Malwarebytes\MBAMService
4. Delete the file HubbleCache
5. Open Malwarebytes

[Envy14]

4 hours ago, Porthos said:

Yes, that is what  fixed around here indicates. It was a FP.

Thank you so much.

[BigArachnotron]

Hello.

Essentially, I came here to report the same.

I decided to delete the files, are these important, I could reinstall Visual Studio again anyways.

I will leave the report just in case there is something interesting.

Regards.

MBAMreport0210.txt

[Porthos]

12 minutes ago, BigArachnotron said:

I decided to delete the files, are these important,

In the future Do not empty the quarantine for a couple of weeks. Nothing in there can harm the computer.

I suggest you reinstall Visual studio before you use it again to be safe.