False Positive ?

[Thomas-19]

Hi.

Recently i have downloaded a little app called Windows Seven/Vista System Properties logo changer - By Orbit30.

I have downloaded it from his deviantart page. See it Here. When using this app it is being detected by Malwarebytes Pro as having a Trojan.Generic infection.

I think this is could be a False Positive. I have uploaded the .exe to Virustotal.

Results 1/41

Please check it out. Thanks!

[TeMerc]

Hello, please follow the instructions below for posting false\positive results:

http://www.malwarebytes.org/forums/index.php?showtopic=3228

[Thomas-19]

Here is the logfile.

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4236

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

25/06/2010 2:19:59 PM
mbam-log-2010-06-25 (14-19-59).txt

Scan type: Full scan (C:\
Objects scanned: 188652
Time elapsed: 35 minute(s), 23 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Users\Thomas\Downloads\System_Properties_Logo_Changer_by_orbit30\WINDOWS 7 SYSTEM PROPERTIES LOGO CHANGER.EXE (Trojan.Generic) -> Quarantined and deleted successfully. [47D4B63FDEB3D830341D8FF14B617F38]

[nosirrah]

This will be fixed in the next update.

[Thomas-19]

I have updated Malwarebytes to Database Version 4241.

Malwarebytes does not pop up saying it contains a Trojan.Generic infection. When i launch the app.

But when doing a scan it's still being detected as being a Trojan.Generic

[Thomas-19]

Bump!

[nosirrah]

I made another change, let me know if this is still detected.

[Thomas-19]

Hi, nosirrah

That's fixed it this time. Thanks.