graesid Posted August 28, 2008 ID:26060 Share Posted August 28, 2008 Jusst started using the program and after running a scan on my Limited User account it comes up with the followingFiles Infected:C:\WINDOWS\system32\dllcache\beep.sys (Fake.Beep.Sys) -> No action taken.I cannot find this file on my computer and I note that if I run Malwarebytes on my main Admin Account nothing is reported .I have run a number of other Anti Spy Applications and they find nothing .Can anyone tell me if they have any experience of this and whether this may be a False positive .Graeme Link to post Share on other sites More sharing options...
Root Admin RubbeR DuckY Posted August 28, 2008 Root Admin ID:26080 Share Posted August 28, 2008 Thanks, I will look into it. Link to post Share on other sites More sharing options...
graesid Posted August 28, 2008 Author ID:26115 Share Posted August 28, 2008 Thanks, I will look into it.Thank you for your acknowledgement .After posting I did find the file C:\WINDOWS\system32\dllcache\beep.sys on my computer by searching on the Admin account .It is is apparently not accessable from the Limited user account as it is a Microsoft System File . I have checked the file with a number of scanners and it appears to be the original Microsoft file which I understand is on most Windows XP systems .I would be very reluctant to delete this file so I will await your reply as to your findings Graeme Link to post Share on other sites More sharing options...
graesid Posted August 30, 2008 Author ID:26251 Share Posted August 30, 2008 I am wondering if anyone else has encountered this situation and can confirm whether or not I have a False positive Link to post Share on other sites More sharing options...
Root Admin RubbeR DuckY Posted August 31, 2008 Root Admin ID:26301 Share Posted August 31, 2008 It is a false positive that happens if you run our program from a limited user account. Link to post Share on other sites More sharing options...
graesid Posted August 31, 2008 Author ID:26321 Share Posted August 31, 2008 Thanks for that information . I am pleased to learn it is a False Positive so I can ignore it in future . I presume it will be fixed in a future update ??Graeme Link to post Share on other sites More sharing options...
DaChew Posted August 31, 2008 ID:26324 Share Posted August 31, 2008 I would not think of using a limited account to scan for malware since you can't remove it when you find it. Link to post Share on other sites More sharing options...
graesid Posted September 1, 2008 Author ID:26366 Share Posted September 1, 2008 That is true but for security I use a limited user account for all my web browsing and online work . As I understand it If damage occurs it can then be limited to that account in many cases . If a scan detects Malware I can then delete using my Admin account if necessay . Link to post Share on other sites More sharing options...
Root Admin RubbeR DuckY Posted September 1, 2008 Root Admin ID:26368 Share Posted September 1, 2008 This will be fixed in the next version. Link to post Share on other sites More sharing options...
ingber Posted December 26, 2008 ID:42487 Share Posted December 26, 2008 We have two a31p Thinkpads running the same currently-updated versions of XP Pro SP3. On both machines we havec:/WINDOWS/system32/dllcache/beep.sysc:/WINDOWS/system32/drivers/beep.sysHowever, on ONLY one machine we get what I believe is a false positive for ONLYc:/WINDOWS/system32/dllcache/beep.syswhich was Quarantined as Fake.Beep.SysWasn't this supposed to be fixed back in August?Thanks.Lester Link to post Share on other sites More sharing options...
ingber Posted December 26, 2008 ID:42488 Share Posted December 26, 2008 We have two a31p Thinkpads running the same currently-updated versions of XP Pro SP3. On both machines we havec:/WINDOWS/system32/dllcache/beep.sysc:/WINDOWS/system32/drivers/beep.sysHowever, on ONLY one machine we get what I believe is a false positive for ONLYc:/WINDOWS/system32/dllcache/beep.syswhich was Quarantined as Fake.Beep.SysWasn't this supposed to be fixed back in August?Thanks.LesterP.S. Both machines have only one user with full Administrator privileges. Link to post Share on other sites More sharing options...
Raid Posted December 26, 2008 ID:42532 Share Posted December 26, 2008 That's very strange.. Would you mind submitting the file mbam thinks is fake? Link to post Share on other sites More sharing options...
ingber Posted December 27, 2008 ID:42550 Share Posted December 27, 2008 That's very strange.. Would you mind submitting the file mbam thinks is fake?I just did upload the beep.sys file. I have been corresponding with one of your staff, Arthur. Here are some of my comments:(1)Previously, you documented that the additional beep.sys files underdllcache/ should not be there and so I deleted them on both machines.This raised the issue that Malwarebytes did not flag/Quarantine thisfile on one of the two computers.(2)In this latest email, you seem to suggest that even if there wereadditional beep.sys files under dllcache, this should not present anyproblems since these beep.sys files in fact are valid system files?> As I mentioned, I used zdiff under Cygwin (a bit by bit comparison) between> /cygdrive/c/WINDOWS/system32/dllcache/beep.sys> /cygdrive/c/WINDOWS/system32/drivers/beep.sys> before deleting /cygdrive/c/WINDOWS/system32/dllcache/beep.sys; the> files were identical> (on both machines and indentical across machines). Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now