Trojan Dropper found in game

[arleetel]

Hi,

Suddenly, mbam popped up that it detected the following :

15:05:10 User MESSAGE IP Protection started successfully

15:07:02 User DETECTION C:\PROGRAM FILES\SolSuite\Sol2.rgf Trojan.Dropper QUARANTINE

15:07:15 User DETECTION C:\Program Files\SolSuite\SolSuite.exe Trojan.Dropper ALLOW

15:07:15 User DETECTION C:\PROGRAM FILES\SolSuite\SolSuite.exe Trojan.Dropper ALLOW

15:07:15 User DETECTION C:\Program Files\SolSuite\SolSuite.exe Trojan.Dropper ALLOW

15:07:15 User DETECTION C:\Program Files\SolSuite\SolSuite.exe Trojan.Dropper ALLOW

15:07:15 User DETECTION C:\PROGRAM FILES\SolSuite\SolSuite.exe Trojan.Dropper ALLOW

15:07:16 User DETECTION C:\PROGRAM FILES\SOLSUITE\SOL2.RGF Trojan.Dropper DENY

15:07:16 User DETECTION C:\PROGRAM FILES\SOLSUITE\SOL2.RGF Trojan.Dropper DENY

15:08:14 User DETECTION C:\PROGRAM FILES\SOLSUITE\SOL2.RGF Trojan.Dropper DENY

I did put the first one in quanrantine, anyway I cannot start the game any more.

I just hope it's a false positive, I have this game installed on the computer for more than a year.

Please advise.

Tahanks in advance.

[Firefox]

For False Positive

Hello , and welcome to malwarebytes.org

If you would like to check if you have a false positive, please read the instructions here:

http://forums.malwarebytes.org/index.php?showtopic=3228

And then post the developer's log and the Virustotal scan link here:

http://forums.malwarebytes.org/index.php?showforum=42

It may also be useful if you could zip and attach the suspect file for the developers to look at.

If you would like the experts to check your computer for malware infections, please print out, read and follow the directions here:

http://www.malwarebytes.org/forums/index.php?showtopic=9573

Try to complete all the steps, but you can skip any steps you are unable to complete. Then post a NEW topic here:

http://www.malwarebytes.org/forums/index.php?showforum=7

If your computer is un-bootable, just post a description of the problems you are having there.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someon has replied to your post.

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org

[arleetel]

Hello Firefox,

Thanks for your reply, in order to run the developer's scan I restored the quarantined file, which was "detected" and reported with a popup, not a scan.

After a quick scan, nothing was found, strange ....

I also scanned the files, the 1st one at virustotal

http://www.virustotal.com/file-scan/reanalysis.html?id=e9b77da3ca87f64bc29fe3b6948367ccd54f163c0275c269b480be0e00295a96-1301320587

and the second one at Jotti (had a bad gateway error at virustotal for this one

http://virusscan.jotti.org/en/scanresult/438ddf71b2079827c801b0efef5722a8af1b81a4

and nothing was found.

I suppose posting these to the link you gave me would be a waste of time.

[Firefox]

No it is not a waste of time, post them in the False positive section and attach the file so that they can comfirm it is a false positive and then they can add it to the database....

Thanks

[arleetel]

OK Firefox, I did.

Thanks.

[Firefox]

your welcome...