False Positive by MBAM on Thunder (Xunlei)

[francis327]

Hi there,

I would like to report on a FP on Thunder Network application, Thunder5 (Xunlei 5).

The error for the scan is as below

Files Infected:

C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll (Trojan.BHO) -> Delete on reboot

Can anyone help to advice on this issue?

[Tigger93]

Follow these instructions please:

http://www.malwarebytes.org/forums/index.php?showtopic=3228

[nosirrah]

If you can also zip and attach a copy of this file please .

[francis327]

Hi there,

Thanks for the reply.

I uploaded the file here.

http://rapidshare.com/files/154784249/MBAM_FP.rar.html

Thanks

[Raid]

Hi there,

Thanks for the reply.

Hello.

Database 1276 does not appear to alert on this file. Please update your copy of MBAM and scan again.

Thanks again!

[nosirrah]

I need the developers log that Tigger93 suggested , your file is not hit by itself so I need more info .

[kiwao]

I'm also having problem with this and here is my log

Malwarebytes' Anti-Malware 1.30

Database version: 1349

Windows 5.1.2600 Service Pack 3

11/1/2008 9:56:45 AM

mbam-log-2008-11-01 (09-56-40).txt

Scan type: Quick Scan

Objects scanned: 39887

Time elapsed: 48 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 2

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{889d2feb-5411-4565-8998-1dd2c5261283} (Trojan.BHO) -> No action taken. [3541483053838075667915354148130153738679697083354148]

HKEY_CLASSES_ROOT\CLSID\{889d2feb-5411-4565-8998-1dd2c5261283} (Trojan.BHO) -> No action taken. [3541483053838075667915354148130153738679697083354148]

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll (Trojan.BHO) -> No action taken. [3541483053838075667915354148130153738679697083354148]

[nosirrah]

Thanks , there is the dev log that I needed , update in 20 minutes will have it fixed .

[kiwao]

thank you for the quick reply

[nosirrah]

Try again now , it should be sorted .

[kiwao]

problem fixed now, thank you so much