beckx020 Posted January 6, 2011 ID:370657 Share Posted January 6, 2011 This popped up today. Seems like several others have it too since yesterday. Didn't come from a scan from the mbam screen. It just magically happened while I was out walking the dog. I do have PUP turned on.I can't give you a developer log since I don't know how to make mbam run in developer mode and use the right click context menu to scan it. I don't want to run a full scan of the system since it takes hours.If you can tell me how to run a scan on the file from the context menu with developer, I'll do that.Malwarebytes' Anti-Malware 1.50.1.1100www.malwarebytes.orgDatabase version: 5467Windows 6.1.7600Internet Explorer 8.0.7600.163851/6/2011 12:31:08 PMmbam-log-2011-01-06 (12-30-20).txtScan type: Quick scanObjects scanned: 1Time elapsed: 3 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 1Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:(No malicious items detected)Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:c:\program files\Java\jre6\bin\keytool.exe (VirTool.Agent.Gen) -> No action taken.keytool.zip Link to post Share on other sites More sharing options...
Staff shadowwar Posted January 6, 2011 Staff ID:370660 Share Posted January 6, 2011 This will be fixed in the next update. Link to post Share on other sites More sharing options...
pe12 Posted January 12, 2011 ID:373279 Share Posted January 12, 2011 I ran a scan and it found and quarantined VirTool.Agent.Gen I later read that it would be fixed (false positive) with the next update. However, when I tried to use the "Restore All" feature in the quarantine section, the VirTool.Agent.Gen just keeps reappearing in the quarantine section. Any ideas why? Link to post Share on other sites More sharing options...
Staff shadowwar Posted January 12, 2011 Staff ID:373290 Share Posted January 12, 2011 i would check that you are uptodate in definitions. what file is it you are trying to restore? Link to post Share on other sites More sharing options...
pe12 Posted January 13, 2011 ID:373602 Share Posted January 13, 2011 I ran a scan and it found and quarantined VirTool.Agent.Gen I later read that it would be fixed (false positive) with the next update. However, when I tried to use the "Restore All" feature in the quarantine section, the VirTool.Agent.Gen just keeps reappearing in the quarantine section. Any ideas why?I am using version 1.50.1.1100 and database 5512. Initially a scan found and quarantined VirTool.Agent.Gen Then I read these posts that said the next update will take care of it (false positive?). So, after i updated the database, i went into the quarantine section and hit "restore all". VirTool.Agent.Gen disappeared from quarantine. Then i re-scanned (using the new database), and when i checked the qarantine section, VirTool.Agent.Gen was listed again. ?? Link to post Share on other sites More sharing options...
Staff shadowwar Posted January 13, 2011 Staff ID:373612 Share Posted January 13, 2011 can you provide a screen shot of the quaritine please showing the files? Link to post Share on other sites More sharing options...
pe12 Posted January 13, 2011 ID:373707 Share Posted January 13, 2011 I am using version 1.50.1.1100 and database 5512. Initially a scan found and quarantined VirTool.Agent.Gen Then I read these posts that said the next update will take care of it (false positive?). So, after i updated the database, i went into the quarantine section and hit "restore all". VirTool.Agent.Gen disappeared from quarantine. Then i re-scanned (using the new database), and when i checked the qarantine section, VirTool.Agent.Gen was listed again. ??here it is. Link to post Share on other sites More sharing options...
Staff shadowwar Posted January 14, 2011 Staff ID:373749 Share Posted January 14, 2011 Ok so when you restore that does the file get restored? Link to post Share on other sites More sharing options...
pe12 Posted January 14, 2011 ID:373753 Share Posted January 14, 2011 here it is.initially, it disappears when i clink "restore all". but if i then click another tab, like "logs", and then click back on "quarantine", it reappears again. is this particular item a false positive? Link to post Share on other sites More sharing options...
Staff shadowwar Posted January 14, 2011 Staff ID:373773 Share Posted January 14, 2011 Yes it was but has been fixed days ago.. Did you actually go to the file location and see if the file is there? Link to post Share on other sites More sharing options...
pe12 Posted January 14, 2011 ID:373928 Share Posted January 14, 2011 Yes it was but has been fixed days ago.. Did you actually go to the file location and see if the file is there?just checked, now it shows to be in the same location, but instead of named "keytool.exe" it is named "keytool". even if it has been restored properly, don't understand why it keeps re-appearing in the quarantined area (after it was restored). at one point, i actually uninstalled malwarebytes program and reinstalled. after updating database, ran a scan and bingo.... there it was again in the quarantined area. if it is a false positive, i can add it to ignore list, but there seems to be a glitch somewhere. Link to post Share on other sites More sharing options...
Staff shadowwar Posted January 14, 2011 Staff ID:373934 Share Posted January 14, 2011 Ok as this is no longer a false positive issue can you please post in the General Malwarebytes forum about this issue and someone from support will help you. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now