taffy2000 Posted August 30, 2010 ID:307060 Share Posted August 30, 2010 Could someone please have a look at this. My malwarebytes full scan is showing 3302 infections (the last one showed over 6000). Does anyone know of any software or hardware issues that could be causing all these false possitives. I have attached the log file. Would really appreciate any help. Thanks.mbam_log_2010_08_30__18_57_01_.txt Link to post Share on other sites More sharing options...
nosirrah Posted August 30, 2010 ID:307065 Share Posted August 30, 2010 It would help a lot if I can have one file detected as rogue.installer and one detected as trojan.vundo. As long as it is one of each you can pick anyone you want. Link to post Share on other sites More sharing options...
taffy2000 Posted August 30, 2010 Author ID:307071 Share Posted August 30, 2010 Thanks for answering so quickly i have attached the files the first one is the vundo and the second one is the rogue installer.False_Possitives.zip Link to post Share on other sites More sharing options...
taffy2000 Posted August 30, 2010 Author ID:307073 Share Posted August 30, 2010 Forgot to mention but when i scan these files individually (with malwarebytes) they show as clean...very strange Link to post Share on other sites More sharing options...
nosirrah Posted August 30, 2010 ID:307074 Share Posted August 30, 2010 I do not think there is a database based FP here, the data the developers log produces is neither possible nor points to any rule or heuristic. I am going to ask support to take a look at this. Link to post Share on other sites More sharing options...
taffy2000 Posted August 30, 2010 Author ID:307078 Share Posted August 30, 2010 Thanks so much for your help i will stay tuned...lol Link to post Share on other sites More sharing options...
taffy2000 Posted September 2, 2010 Author ID:308264 Share Posted September 2, 2010 Dont know if this is still open but ive just removed and reinstalled MalwarebytesRun a full scan Found 15000 (yes 15 thousand) infections Defo something on my machine doesnt like working with malwarebytes if anyone has any idea what i would rather remove that than Malwarebytes Link to post Share on other sites More sharing options...
IDKWatMNShouldBe Posted September 4, 2010 ID:309117 Share Posted September 4, 2010 holly **** thats alot! i have no clue why... Link to post Share on other sites More sharing options...
taffy2000 Posted September 4, 2010 Author ID:309145 Share Posted September 4, 2010 Ha ha, Holy **** is right. Seriously though i know i am not infected it must be code from one of my programs not quite getting on with the code from Malwarebytesjust wish i could pin point it and sort it out Link to post Share on other sites More sharing options...
nosirrah Posted September 4, 2010 ID:309255 Share Posted September 4, 2010 It can only be something system specific as we would be flooded if this were a real FP.Do you have any policies set for the folder C:\Windows\winsxs\?Are you scanning from an admin or limited account?C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (Rogue.Installer)C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7600.16385_none_ebf82fc36c758ad5\comctl32.dll (Rogue.Installer)Can you explain why 2 versions of the same dll are in memory at the same time? Link to post Share on other sites More sharing options...
MAM Posted September 4, 2010 ID:309315 Share Posted September 4, 2010 My goodness, some thing is here wrong ...MAM Link to post Share on other sites More sharing options...
taffy2000 Posted September 4, 2010 Author ID:309384 Share Posted September 4, 2010 I have no policies set for winsxsI am running the scan from an admin account on a fresh install of windows 7 onto a clean harddriveAs for two versions of the same dll loaded into memory, i didnt think that was possibleI have 4 PCs on the network and malwarebytes is working perfectly on the other 3Could the two dlls possibly be something to do with sandboxie ?I just cant find anythingI have attached a screenshot of my installed programs just in case anyone has any ideasSystem.zip Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now