trojan.banker

[Kristov]

Today, after updating Malwarebytes, I ran a scan which reported a file as containing trojan.banker. The file,deltreew.exe, has been on my system for some time and has neither been reported by my other security software nor by Malwarebytes before today's update. I checked a previous backup of the file and that is also now picked up by Malwarebytes as containing trojan.banker although it was cleared by Malwarebytes before. It seems, therefore, that the file in question has not recently been infected.

The log of the scan is as follows:

Malwarebytes' Anti-Malware 1.46

www.malwarebytes.org

Database version: 4340

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18702

23/07/2010 10:26:53

mbam-log-2010-07-23 (10-26-53).txt

Scan type: Full scan (C:\|H:\|I:\|J:\|)

Objects scanned: 218686

Time elapsed: 1 hour(s), 9 minute(s), 52 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\DRIVERS\NECMENU\DELTREEW.EXE (Trojan.Banker) -> Quarantined and deleted successfully.

I have a zipped copy of the file in a folder on my desktop but it has been removed by Malwarebytes from its original location.

Could this be a false positive as none of my other security software picks it up?

Thanks

DELTREEW.zip

[nosirrah]

This will be fixed in the next update.

[Kristov]

This will be fixed in the next update.

Thanks nosirrah, I've scanned the file today after updates for Malwarebytes and there were no problems with the file this time.