False Positive

[SweetTech]

I've been helping a user at WhatTheTech. A link to the thread.

The file in question is: D:\Program Files\Sierra\Half-Life\gearbox\Dq2249.icd. I suspect the file in question is a false positive because it belongs to the legitimate Sierra Half-Life program. MBAM is detecting the file as a Trojan.Agent infection. It was first detected when the user ran a full scan using MBAM here. The user scanned the file using VirusTotal. I then had the user upload the file to your UploadNet! server. Then I had the user run MBAM in Developer mode and the log can be found here.

I hope that I've provided you with enough information. If you should require any additional scans/logs please let me know.

Thanks,

SweetTech.

[miekiemoes]

Hi,

The user scanned the file using VirusTotal.

.

I think above results say it already, 21 out of 41 other scanners detect it as well.

In either way, since you uploaded it for us, we will investigate it again and remove detection if it's indeed a false positive.

[SweetTech]

Thanks miekiemoes!