False detection by protect mode of MB

[Paulinjc]

The file being discussed here is called "lxbaaior.dll".

The file is part of the Lexmark X5150 All-In-One printer software set.

The file is used to display a control center screen for use in checking and troubleshooting X5150 Printer operations to insure all is a-ok.

When MB is asked to SCAN this file, it does NOT find any problems.

When MB is in PROTECT mode, and this program is activated, MB immediately classifies it as "trojan:false.alert" and wants me to quarentine or remove it. When I quarentine it, this Lexmark feature dissapears and the Lexmark control center is not available.

I restored it using MB.

I asked Microsoft Security Essentials to check it using its malware detection process and it saw no problem here.

I think MB has a library of file names that somewhere, sometime caused a problem for somebody and therefore MB put this file in its library of malware. But ONLY the PROTECT mode has a problem....not the scan.

Any advice on this would be appreciated.

Thanks.

PS: Upload of this file failed due to me not being authorized to upload Lexmark property.

[exile360]

Greetings

Have you checked to see if an actual Quick Scan or Full Scan picks it up? It may as the individual file scan does not use MBAM's heuristics, only its primary database. Please follow the instructions in this post to see if it gets detected. Use that method to first run a Quick Scan, and if the item is not detected, then please use it to run a Full Scan. If it gets detected by either scan, save the log and post it into your next reply for analysis by the threat researchers.

Thanks

[Paulinjc]

Greetings

Have you checked to see if an actual Quick Scan or Full Scan picks it up? It may as the individual file scan does not use MBAM's heuristics, only its primary database. Please follow the instructions in this post to see if it gets detected. Use that method to first run a Quick Scan, and if the item is not detected, then please use it to run a Full Scan. If it gets detected by either scan, save the log and post it into your next reply for analysis by the threat researchers.

Thanks

Both scans - quick and full - have run with NO DETECTIONS. Only the PROTECT mode sees a problem here. This file was also checked by Microsoft Threat Analysis and they found NO THREAT.

[nosirrah]

Please zip and attach a copy of lxbaaior.dll to your next post .

[TeMerc]

This issue is supposedly fixed in v1.42 currently in beta.

Maybe SwanDog will drop in and reply as well.