Autorun Eater Component False Positive

[testing456]

Malwarebytes is falsely detecting an Autorun Eater component as a trojan. The file is 'billy.exe'.

Autorun Eater is a legitimate security software by Old McDonald's Farm.

Below is part of the log file:

Malwarebytes' Anti-Malware 1.41

Versione del database: 2775

26/11/2009 13.46.27

mbam-log-2009-11-26 (13-46-27).txt

Tipo di scansione: Scansione completa (C:\|D:\|H:\|N:\|)

Elementi scansionati: 190625

Tempo trascorso: 31 minute(s), 40 second(s)

Processi delle memoria infetti: 1

Moduli della memoria infetti: 0

Chiavi di registro infette: 0

Valori di registro infetti: 4

Elementi dato del registro infetti: 0

Cartelle infette: 0

File infetti: 4

Processi delle memoria infetti:

C:\Programmi\Autorun Eater\billy.exe (Trojan.Autorun) -> Unloaded process successfully.

Moduli della memoria infetti:

(Nessun elemento malevolo rilevato)

Chiavi di registro infette:

(Nessun elemento malevolo rilevato)

Valori di registro infetti:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bf (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bk (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\iu (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\mu (Trojan.Agent) -> Quarantined and deleted successfully.

Elementi dato del registro infetti:

(Nessun elemento malevolo rilevato)

I've attached the file in this post.

[miekiemoes]

Hi,

This one was already fixed more than a month ago.

So please update your database since you are around 500 updates behind. Then verify if this is fixed.

The other detections:

Valori di registro infetti:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bf (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bk (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\iu (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\mu (Trojan.Agent) -> Quarantined and deleted successfully.

those are no false positives.

[testing456]

Hi,

This one was already fixed more than a month ago.

So please update your database since you are around 500 updates behind. Then verify if this is fixed.

The other detections:

Valori di registro infetti:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bf (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bk (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\iu (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\mu (Trojan.Agent) -> Quarantined and deleted successfully.

those are no false positives.

Oh, I'll update and see if it still happens. Thank you!

[testing456]

Okay, I can confirm with you that problem is solved after updating. Thank you!

[miekiemoes]

Thank you for the feedback