CookieWall

[Jacee]

I'm pretty sure we have a F/P here ... Mbam is flagging CookieWall as malware ... been using it since 2002

http://www.analogx.com/contents/download/N...ie/Freeware.htm

[nosirrah]

I am unable to replicate this, what defs version produce this and what is the precise path.

[Jacee]

Here's the log:

Malwarebytes' Anti-Malware 1.46

www.malwarebytes.org

Database version: 4261

Windows 6.1.7600

Internet Explorer 8.0.7600.16385

6/30/2010 10:08:52 AM

mbam-log-2010-06-30 (10-08-52).txt

Scan type: Quick scan

Objects scanned: 133008

Time elapsed: 4 minute(s), 31 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\Downloads\cookiei.exe (Malware.Packer.Gen) -> No action taken.

[Jacee]

This is the path

[nosirrah]

Could you zip and attach your copy please, what I am downloading triggers nothing. I have replicated all but your user name on my 7 box and there is nothing.

Malware.Packer.Gen <- this does indicate that a file is built/packed in a way know to be malicious, I am guessing that the author has moved away from this. If you have an older version this would explain everything.

[Jacee]

I'll uninstall it, re-install and see if it gets picked up again.

[Jacee]

Hummm, that didn't work ... it's still being detected

Let's see if I zipped this right

cookiei.zip

[nosirrah]

This is the actual file that is detected on your end? This does not hit no matter what I do on this end.

Please get me a developers mode scan :

http://forums.malwarebytes.org/index.php?showtopic=3228

[Jacee]

I sent the file to Avira too ... It is baffling isn't it? This is on my Windows 7 Ultimate, the same file is also on my Win XP home and Vista Business ... not picked up on either one of those machines