Strange Malwarebytes "Problem"?

[Ricky O.]

I posted this before in the false forum, so mountaintree16 said to me, I shall post it here:

Good evening here from Germany.

Today I wanted to setup some languages for Windows XP, for example: Japanese. So I went to the control panel to install them. While I set the empty field on check, Windows startet installing the missing languages, then all of a sudden I got a message from Malwarebytes, telling me this right here:

13:42:51 Ricky DETECTION C:\WINDOWS\Fonts\SET4F4.tmp Spyware.OnlineGames QUARANTINE

13:42:51 Ricky DETECTION C:\WINDOWS\Fonts\SET4F4.tmp Spyware.OnlineGames DENY

13:42:52 Ricky ERROR Quarantine failed: UtilityReadFile failed with error code 2

I put it into the quarantine, then it finished normally. The file nonetheless was nowhere to be found, not in the Quarantine or elsewhere. So, I repeated the action, checking and unchecking the square to install those languages again. And this happened:

14:12:07 Ricky DETECTION C:\WINDOWS\Fonts\SET71E.tmp Spyware.OnlineGames QUARANTINE

14:12:07 Ricky DETECTION C:\WINDOWS\Fonts\SET71E.tmp Spyware.OnlineGames DENY

14:12:08 Ricky ERROR Quarantine failed: UtilityReadFile failed with error code 2

So, I sent the SET17E.tmp to Virustotal.com. And as a result it showed 0/41. No virus nor malware. I ran Malwarebytes with a whole check, I ran AntiVir with a complete check: Nothing. No virus, no nothing there.

Is it maybe a false alarm?

I made a log with the "mbam.exe /developer"-code. This is it. It's in german:

Malwarebytes' Anti-Malware 1.46

www.malwarebytes.org

Geladene Signaturen:

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18702

03.05.2010 18:56:25

mbam-log-2010-05-03 (18-56-25).txt

Art des Suchlaufs: Vollst舅diger Suchlauf (C:\|)

Durchsuchte Objekte: 224034

Laufzeit: 42 Stunde(n), 29 Minute(n)

Infizierte Speichermodule: 0

Infizierte Registrierungsschl・sel: 0

Infizierte Registrierungswerte: 0

Infizierte Dateiobjekte der Registrierung: 0

Infizierte Verzeichnisse: 0

Infizierte Dateien: 0

Eine Logdatei wurde im Logdatei-Verzeichnis gespeichert. 0

Infizierte Speichermodule:

Infizierte Speicherprozesse:

Infizierte Registrierungsschl・sel:

Infizierte Speicherprozesse:

Infizierte Registrierungswerte:

Infizierte Speicherprozesse:

Infizierte Dateiobjekte der Registrierung:

Infizierte Speicherprozesse:

Infizierte Verzeichnisse:

Infizierte Speicherprozesse:

Infizierte Dateien:

Infizierte Speicherprozesse:

Eine Logdatei wurde im Logdatei-Verzeichnis gespeichert.

Infizierte Speicherprozesse

[nosirrah]

This will be fixed in the next update .

[Ricky O.]

So it is a false report? Because it said something to me about quarantine, but it had nothing to put it there.^^

[miekiemoes]

Hi,

Some files in the fonts folder are not visible (hidden from explorer shell), so that explains why you can't find them. However, font files shouldn't have a .tmp extension, but in your case, it might indeed be a false positive, so this will be fixed in next update.

[Ricky O.]

Alright, thanks. I was wondering what that was. So, since it will be fixed, I will rather wait for the next update and keep an eye on my PC, rather then reinstall everything.

[miekiemoes]

Next update will be in around 1 hour or so