alien4 Posted January 5, 2011 ID:370309 Share Posted January 5, 2011 Using Win XP Pro sp3Using ver 1.50.1.110mbam_log_2011_01_05__11_55_10_.txt the scan detected the following:c:\WINDOWS\system32\notepad.exe (Trojan.FakeMS) c:\WINDOWS\notepad.exe (Trojan.FakeMS)I do not believe these to be real as they did not show up when using ver 1.46, however has anyone else seen this?I am also attaching the mbam log in developer mode as directed in the post.Thanks any help would be appreciated Link to post Share on other sites More sharing options...
nosirrah Posted January 5, 2011 ID:370315 Share Posted January 5, 2011 Please zip and attach a copy of notepad.exe to your next post. Link to post Share on other sites More sharing options...
alien4 Posted January 6, 2011 Author ID:370339 Share Posted January 6, 2011 Attached is a zip file folder as requested.MBAM_Log.zip Link to post Share on other sites More sharing options...
alien4 Posted January 6, 2011 Author ID:370341 Share Posted January 6, 2011 Sorry I didn't read closely, I have already deleted the notepad.exe file from my computer as I found that it was almost 3X the file size of a true notepad.exe and have replaced, sorry for the confusion. My only other question is why this was not discovered in the earlier versions as 1.46 and earlier versions did not flag the trojan yet it appears to have been on my PC since November1. Link to post Share on other sites More sharing options...
nosirrah Posted January 6, 2011 ID:370354 Share Posted January 6, 2011 Malware is known to fake creation dates to avoid 'sort by creation/modified date' bringing them to the top of the sorted list, that creation date could well be a fake. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now