Trojan.Dropper in A0034582.exe

[MAM]

Hello, is this a F/P ?

Malwarebytes' Anti-Malware 1.44

Database version: 3800

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18702

27.02.2010 18:47:28

mbam-log-2010-02-27 (18-47-27).txt

Scan type: Full Scan (C:\|D:\|E:\|F:\|J:\|)

Objects scanned: 173674

Time elapsed: 36 minute(s), 21 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

F:\System Volume Information\_restore{2F8603EE-B839-4B83-BEEF-4051E8BD7D28}\RP153\A0034582.exe (Trojan.Dropper) -> No action taken. [23DD6F5B014B792073ECD61B80BB933A]

MAM

[MAM]

Hello, always the same here this the latest update

Is this Malware, or not, or a falseposetive ?

Malwarebytes' Anti-Malware 1.44

Database version: 3803

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18702

27.02.2010 19:57:57

mbam-log-2010-02-27 (19-57-55).txt

Scan type: Full Scan (C:\|D:\|E:\|F:\|)

Objects scanned: 173242

Time elapsed: 35 minute(s), 0 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

F:\System Volume Information\_restore{2F8603EE-B839-4B83-BEEF-4051E8BD7D28}\RP153\A0034582.exe (Trojan.Dropper) -> No action taken. [23DD6F5B014B792073ECD61B80BB933A]

A asking MAM.

MAM

[Ibrad]

I think it's malware, every other forum where his has been reported it the person asking was told it's malware.

[nosirrah]

It is in system restore and not anywhere in your system . This usually indicates malware as if it were not , there would also be a detection within your normal file system .

[MAM]

I think it's malware, every other forum where his has been reported it the person asking was told it's malware.

Well, iam not a cross poster

I ask here for the first time

Malware, or mot ?!

MAM

[MAM]

It is in system restore and not anywhere in your system . This usually indicates malware as if it were not , there would also be a detection within your normal file system .

Ok, you mean that is harmless ?

But, should i it delete, or not ?!

MAM

[Blaze]

What you can do is disable your system restore, this will delete the file. Afterwards do a full scan with MBAM and put on system restore again.

Malware can hide in your system restore, but that doesn't mean this file is malware.

However, I googled and found that AVG flagged it as "A0034582.exe -> Trojan.OnLineGames.qhh"

So you might as well disable system restore, do a full scan with MBAM, afterwards put system restore back on again .

Hope this helps.

[nosirrah]

A0034582 <- is a meaningless file name as it on no way matches its original name .

If you turn off system restore and then turn it back on this will vanish as windows flushes all old restore points and creates a new one .

[MAM]

This problem is solved

MAM