I saved a screenshot and named it xpantivirus2009.jpeg

[IT Expert]

Just giving you all heads up it seems as if malwarebytes looks at file names, not just the code of a file. I took a screenshot of a rogue security program, and name it xpantivur2009.jpeg. During the scan it flagged it. I renamed the file before it was deleted. here is the log

Malwarebytes' Anti-Malware 1.31

Database version: 1528

Windows 5.1.2600 Service Pack 3

12/21/2008 4:43:28 PM

mbam-log-2008-12-21 (16-43-28).txt

Scan type: Full Scan (C:\|D:\|)

Objects scanned: 172233

Time elapsed: 48 minute(s), 49 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\Documents and Settings\Nick\Desktop\xpantivirus2009.JPG (Rogue.XPantivirus) -> Quarantined and deleted successfully.

[exile360]

Yup, you are correct, MBAM does indeed files/folders based on their names, it's part of it's detection algorithm and heuristics, however, whenever this occurs and it flags a file or folder related to a legitimate program the developers create a whitelist rule for it once someone reports it.

[IT Expert]

Thats good to know thanks, I will make sure to rename my pics something different than known infection names