Everest Lavalys Flagged as Trojan.Agent

[TrDo]

A few moments ago upon a reboot, due to a Microsoft Update, I got a message from MBAM that everest.exe is flagged as a Trojan.Agent. I ignored the message, since I have been running Everest since ages on my laptop.

To make sure that MBAM really flagged this file as Trojan.Agent, I re-scanned the file, and again it came up as a Trojan.Agent.

Malwarebytes' Anti-Malware 1.45

www.malwarebytes.org

Database version: 4046

Windows 6.1.7600

Internet Explorer 8.0.7600.16385

28/4/2010 8:40:45 μμ

mbam-log-2010-04-28 (20-40-45).txt

Scan type: Quick scan

Objects scanned: 1

Time elapsed: 6 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\Program Files (x86)\Lavalys\EVEREST Ultimate Edition\everest.exe (Trojan.Agent) -> No action taken.

Further Info:

Everest.exe version: 5.30.1900.0

MD5 :13a837bf52df0d287247c8dc866e4256

SHA-1: def12d7ef2a6c1f30d698c27c9b857de47e43b73

I would appreciate your views and corrective actions.

Thank you very much in advance.

[Fatdcuk]

Hi TrDo,

Please can you zip and attach a copy of your everest.exe alond with a developer s quick scan log

http://forums.malwarebytes.org/index.php?showtopic=3228

Thanks in advance

[TrDo]

Hi Fatdcuk,

Please find attached the everest.exe and the developers log.

Please note, that the developers scan log is in quick scan mode. Nothing there. The FP comes out when I scan the Everest Folder with MBAM using the context menu (right-mouse).

Did not know, how to re-produce the context menu for this file only, from the run "mbam.exe /developer".

If this scan log is useless, please advice.

Thanks in advance.

TrDo

everest.zip

mbam_log_2010_04_29__15_54_55_.zip

[Fatdcuk]

Hi TrDo,

Apparently this has been fixed earliar today.

Please can you update to the most recent database and confirm that the detection is no longer being made ?

Thanks in advance

[TrDo]

Hi Fatdcuk,

Yes, I confirm that this issue has been fixed. I scanned the file twice, and everything is fine.

Thank you very much for your advice, help and prompt actions.

Take care.

TrDo.