Night_Raven Posted October 28, 2009 ID:150071 Share Posted October 28, 2009 Wc3Assistant is detected as Trojan.Downloader. Website is in german but the download link should be fairly obvious. Link to post Share on other sites More sharing options...
nosirrah Posted October 28, 2009 ID:150079 Share Posted October 28, 2009 I am unable to replicate this . Update MBAM and get me a developers log :http://www.malwarebytes.org/forums/index.php?showtopic=3228 Link to post Share on other sites More sharing options...
Night_Raven Posted October 28, 2009 Author ID:150105 Share Posted October 28, 2009 I apologize. I forgot to say it's the real-time protection that detects this as a Trojan.Downloader. The on-demand scanner doesn't. MBAM rules are the latest (3044). Link to post Share on other sites More sharing options...
nosirrah Posted October 28, 2009 ID:150123 Share Posted October 28, 2009 I need help from the coders on this one as it might not be completely a database issue . Link to post Share on other sites More sharing options...
nosirrah Posted October 28, 2009 ID:150233 Share Posted October 28, 2009 I still cant get this to hit on my system but you may want to take a look at this :http://www.virustotal.com/analisis/791280e...a586-1256716997I was a little suspicious when i saw that they had the file hosted on rapidshare instead of their own site and now I see why . Link to post Share on other sites More sharing options...
Night_Raven Posted October 28, 2009 Author ID:150322 Share Posted October 28, 2009 So a bunch of not very reliable antivirus programs classify it as some generic or unknown threat. Big deal. Frankly, for example I don't even look at what a-squared and Ikarus detect because they produce so many false positives. What I look at in any VT scan result page are the current top antivirus products: KAV, NOD32, AntiVir and avast!. The rest mean little to me. B)Just for the heck of it I unpacked Wc3Assistant.exe to wc3.exe with UPX (was too lazy to type something longer for an output file) and uploaded it for another scan. Here's what VT showed me:http://www.virustotal.com/analisis/79477f2...23b8-1256730650 Link to post Share on other sites More sharing options...
nosirrah Posted October 28, 2009 ID:150339 Share Posted October 28, 2009 This may actually be a bug as this does not exist in the database , we are still looking into this . Link to post Share on other sites More sharing options...
Night_Raven Posted October 29, 2009 Author ID:150702 Share Posted October 29, 2009 One more thing. MBAM's protection module sometimes crashes after it detects something and I click 'Ignore'. Haven't tried clicking another button so I don't know how it would react to that. It says MBAM's service terminated unexpectedly. After I launch MBAM's scanner and try to re-activate the protection module it says the service can't be created. A reboot is required to get the PM running again.I can provide screenshots if needed.Edit: OK, it just crashed again when I tried to launch Update Notifier. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now