user99 Posted June 14, 2011 ID:440770 Share Posted June 14, 2011 Looks to me like this could be a FP for a .exe file is there anyway to be certain ? Link to post Share on other sites More sharing options...
sUBs Posted June 14, 2011 ID:440775 Share Posted June 14, 2011 Please attach the file in your next reply Link to post Share on other sites More sharing options...
user99 Posted June 14, 2011 Author ID:440776 Share Posted June 14, 2011 here we go Link to post Share on other sites More sharing options...
sUBs Posted June 14, 2011 ID:440777 Share Posted June 14, 2011 And where did it go? Link to post Share on other sites More sharing options...
user99 Posted June 14, 2011 Author ID:440778 Share Posted June 14, 2011 Lets start from the begining, shall we mbam-log-2011-06-14 (06-39-50).zip Link to post Share on other sites More sharing options...
sUBs Posted June 14, 2011 ID:440779 Share Posted June 14, 2011 Hello, the log wont tell much. I need the file before I can ascertain if it's malware or an FP. Link to post Share on other sites More sharing options...
user99 Posted June 14, 2011 Author ID:440945 Share Posted June 14, 2011 here we go thendevcon_x86.zip Link to post Share on other sites More sharing options...
sUBs Posted June 14, 2011 ID:440957 Share Posted June 14, 2011 This is an FP and shall be fixed in the next update. As an aside, even when we fixed this,4 other vendors will flag it. Refer to the link belowhttp://www.virustotal.com/file-scan/report.html?id=419fc5a9ff7f591ae001a20fbf4c80f53c308d1aee7fd5e2f3b66c8dcf673c2a-1308072419The file is a altered copy of Microsoft's devcon.exe; modified and then repacked with UPX. Hueristics may flag it. For peace of mind, I recommend that you replace the modified file with the original from Microsoft which may be freely downloaded from here > http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q311272 Link to post Share on other sites More sharing options...
user99 Posted June 14, 2011 Author ID:440962 Share Posted June 14, 2011 Thanks for that, seems very interesting.I did try follow the link to MS download, but was faced with an error when attempting to connect...http://download.microsoft.com/download/1/1/f/11f7dd10-272d-4cd2-896f-9ce67f3e0240/devcon.exedo you know of any other authentic download links Link to post Share on other sites More sharing options...
user99 Posted June 14, 2011 Author ID:440964 Share Posted June 14, 2011 disregard my last , I managed the download okay this time , from the link i reposted. *strange* Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now