Recent Posts

11

UCheck / Re: Ucheck link wrong

« Last post by Curson on April 05, 2019, 04:41:44 pm »

Hi jmcgrat5,

Could you please update UCheck to its latest version and follow the instructions stated in my previous post ?

Regards.

12

RogueKiller / Re: nortonsecurity.exe detected as a threat?

« Last post by Curson on April 05, 2019, 04:39:26 pm »

Hi linkboy,

Many thanks for your feedback.
We were able to pinpoint the rule who was causing this false positive and fixed it.

The new detection ruleset will be available shortly and Norton processes won't be detected anymore.

Regards.

13

RogueKiller / Re: Trojan Flystudio False positive or real?

« Last post by Curson on April 05, 2019, 04:34:12 pm »

Hi Faergor,

This this the output of a MBAM log, not a RogueKiller one.
However, this file looks suspicious, so I advise you to open a new thread on Malwarebytes forum to check this out.

Regards.

14

RogueKiller / Re: Rogue Anti-Malware Installer Bug

« Last post by Curson on April 05, 2019, 04:16:49 pm »

Hi Mops21,

Could you please delete the entire content of your Download folder, then retry ?

Regards.

15

RogueKiller / Re: nortonsecurity.exe detected as a threat?

« Last post by linkboy on April 05, 2019, 02:01:03 pm »

Created full dmp files and posted for you via PM. Thank you, in advance.

16

RogueKiller / Re: Trojan Flystudio False positive or real?

« Last post by Faergor on April 05, 2019, 12:19:45 pm »

I would  also like to ask.
Avast was mentioned here:
Trojan.FlyStudio, C:\WINDOWS\TEMP\AVAST_ASH2\WINRAR ARCHIVER (64 BIT)\WINRAR-X64-570CZ.EXE, No Action By User, [8009], [664683],1.0.10008

Could it have been modified somehow and therefore roguekiller reports it as old version, or does it report it incorrectly? Thanks

17

RogueKiller / Re: Rogue Anti-Malware Installer Bug

« Last post by Mops21 on April 05, 2019, 12:10:45 pm »

Hi

That view view is from the first Picture is changed to this view see Picture 2

With best Regards
Mops21

18

RogueKiller / Trojan Flystudio False positive or real?

« Last post by Faergor on April 05, 2019, 12:50:56 am »

Hello,
I scanned my computer with roguekiller, eset online scanner,malwarebytes, malwarebytes mbar.
Malwarebytes Mbar found this as infected file. File located in winrar folder called Default.SFX.
I uploaded file to virustotal and more antivirus programs picked it up.
https://www.virustotal.com/#/file/0a2484026f989bbc29caba5873ac9c0a64ecad529b76f08a50cb1ec470b04453/detection

Then I scanned my computer with Malwarebytes and it caught this:

Trojan.FlyStudio, C:\PROGRAMDATA\MALWAREBYTES' ANTI-MALWARE (PORTABLE)\DEFAULT.SFX-K.MBAM, No Action By User, [8009], [664683],1.0.10008
Trojan.FlyStudio, C:\PROGRAMDATA\MALWAREBYTES' ANTI-MALWARE (PORTABLE)\DEFAULT.SFX-U.MBAM, No Action By User, [8009], [664683],1.0.10008
Trojan.FlyStudio, C:\WINDOWS\TEMP\AVAST_ASH2\WINRAR ARCHIVER (64 BIT)\WINRAR-X64-570CZ.EXE, No Action By User, [8009], [664683],1.0.10008

I am attaching the file.
Is this please false positive or real? Thanks.

19

RogueKiller / Re: Rogue Anti-Malware Installer Bug

« Last post by Curson on April 04, 2019, 07:27:30 pm »

Hi Mops21,

I'm really sorry, but I don't understand.
What do you exactly mean by "the view from the Folder is changed" ?

Regards.

20

RogueKiller / Re: Rogue Anti-Malware Installer Bug

« Last post by Mops21 on April 04, 2019, 07:03:25 pm »

Hi

That is right I have installed it

I mean the view is changed after the install i mean the view from the Folder is changed

With best Regards
Mops21