DR_M Posted November 17, 2023 ID:1600381 Share Posted November 17, 2023 It seems that Malwarebytes detects KpRm as malware. However it is a false positive detection. Can you please check that? 1 Link to post Share on other sites More sharing options...
David H. Lipman Posted November 17, 2023 ID:1600382 Share Posted November 17, 2023 Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 11/17/23 Scan Time: 12:17 PM Log File: 36b34732-856d-11ee-b1f6-9cd21ec4b160.json -Software Information- Version: 4.6.6.294 Components Version: 1.0.2189 Update Package Version: 1.0.77380 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x86 File System: NTFS User: Blue-PC\Admin -Scan Summary- Scan Type: Custom Scan Scan Initiated By: Manual Result: Completed Objects Scanned: 1 Threats Detected: 1 Threats Quarantined: 0 Time Elapsed: 0 min, 29 sec -Scan Options- Memory: Disabled Startup: Disabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 1 Malware.AI.2477658244, C:\1\KPRM_2.15.EXE, No Action By User, 1000000, -1817309052, 1.0.77380, C4908433A084A73293AE1084, dds, 02565572, 87FFF8B4042A293376F0FC452CF001C9, CB448831D7527BD6D73F2659CA5D0D7BE70527ECE701C6071DFC418ABCE6F569 Physical Sector: 0 (No malicious items detected) WMI: 0 (No malicious items detected) (end) Link to post Share on other sites More sharing options...
1PW Posted November 17, 2023 ID:1600399 Share Posted November 17, 2023 (edited) Malwarebytes Malware.AI.2477658244 Reference: https://www.virustotal.com/gui/file/cb448831d7527bd6d73f2659ca5d0d7be70527ece701c6071dfc418abce6f569/detection https://forums.malwarebytes.com/topic/270716-kprm/ cc: @kernel-panik Edited November 17, 2023 by 1PW Link to post Share on other sites More sharing options...
DR_M Posted November 17, 2023 Author ID:1600404 Share Posted November 17, 2023 KpRm by kernel-panik was/is used by Malware Analysts to remove the tools used during cleaning procedure, and reset the restore points. The detection is a false/positive and that is why I started this topic. More info here: Downloads - KpRm - ToolsLib Any useful input would be appreciated. 1 Link to post Share on other sites More sharing options...
David H. Lipman Posted November 17, 2023 ID:1600406 Share Posted November 17, 2023 PING @miekiemoes 1 Link to post Share on other sites More sharing options...
Staff cli Posted November 17, 2023 Staff ID:1600413 Share Posted November 17, 2023 The rule has been removed. Thanks for reporting. 3 Link to post Share on other sites More sharing options...
DR_M Posted November 18, 2023 Author ID:1600488 Share Posted November 18, 2023 16 hours ago, cli said: The rule has been removed. Thanks for reporting. Thanks a lot! 🙃 Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now