Toshiba Application Installer

[DarkSnakeKobra]

Another FP.

Malwarebytes' Anti-Malware 1.50.1.1100

www.malwarebytes.org

Database version: 6641

Windows 6.1.7601 Service Pack 1

Internet Explorer 9.0.8112.16421

5/22/2011 10:03:58 PM

mbam-log-2011-05-22 (22-03-54).txt

Scan type: Quick scan

Objects scanned: 186043

Time elapsed: 8 minute(s), 8 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

c:\Users\darksnake-kobra\AppData\Local\Temp\install.EXE (Trojan.Downloader) -> No action taken. [4aa79f7a39c78a7669e499bc15ee14ec]

[nosirrah]

Please update and check this again, we cannot replicate this detection.

[DarkSnakeKobra]

I'm assuming the file is created at launch time with different hash values. I have it on the ignore list and it was still detected. Although I did try and lunch it a few moments ago, but it didn't detect it.

Malwarebytes' Anti-Malware 1.50.1.1100

www.malwarebytes.org

Database version: 6653

Windows 6.1.7601 Service Pack 1

Internet Explorer 9.0.8112.16421

5/23/2011 11:27:55 AM

mbam-log-2011-05-23 (11-27-55).txt

Scan type: Quick scan

Objects scanned: 186936

Time elapsed: 5 minute(s), 32 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

[shadowwar]

We need to figure out what def is hitting. Can you possibly get the file that hits?