Jump to content

dr.web av file is detected as backdoor


Guest BlairWitch

Recommended Posts

Guest BlairWitch

Here is the log file:

Malwarebytes' Anti-Malware 1.51.2.1300

www.malwarebytes.org

Database version: 7935

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18702

13.10.2011 19:57:36

mbam-log-2011-10-13 (19-57-32).txt

Scan type: Quick scan

Objects scanned: 171174

Time elapsed: 5 minute(s), 7 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 1

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Firewall (Backdoor.Bot) -> Value: Firewall -> No action taken. [41beb767ff0160a00414038d17ed2dd3]

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

c:\program files\DrWeb\frwl_notify.exe (Backdoor.Bot) -> No action taken. [41beb767ff0160a00414038d17ed2dd3]

Link to post
Share on other sites

Guest BlairWitch

Here is the latest quick scan result. Even though i have the realtime of mbam on it does not detect the file. It's only when it scans the additional items in the quick scan. Here is the file file.zip

Here is the latest log file:

Malwarebytes' Anti-Malware 1.51.2.1300

www.malwarebytes.org

Database version: 7951

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18702

15.10.2011 13:05:16

log

Scan type: Quick scan

Objects scanned: 170930

Time elapsed: 4 minute(s), 11 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 1

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Firewall (Backdoor.Bot) -> Value: Firewall -> No action taken. [c74830efc739a55b4a3ac9c76d97f30d]

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

c:\program files\DrWeb\frwl_notify.exe (Backdoor.Bot) -> No action taken. [c74830efc739a55b4a3ac9c76d97f30d]

This detection appeared after i upgraded the doctor web av and firewall to version 7.

Link to post
Share on other sites

  • 2 months later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.