Jump to content


Photo

exploit.drop.3 false positive ...?


  • Please log in to reply
11 replies to this topic

#1 IanJ

IanJ

    New Member

  • Members
  • Pip
  • 3 posts

Posted 10 January 2012 - 01:09 PM

Hi,

Running my Arduino develpment system exe I am now getting a problem citing exploit.drop.3 located at C:\Users\IanJ\AppData\Local\Temp

I have zipped up and attached the offending file.

Can somebody pls confirm either way.

Ian.

Attached Files



#2 IanJ

IanJ

    New Member

  • Members
  • Pip
  • 3 posts

Posted 10 January 2012 - 01:13 PM

Note: I should have said this doesn't come up in a scan, it comes up when I try to run my Arduino dev system.

Ian.


View PostIanJ, on 10 January 2012 - 01:09 PM, said:

Hi,

Running my Arduino develpment system exe I am now getting a problem citing exploit.drop.3 located at C:\Users\IanJ\AppData\Local\Temp

I have zipped up and attached the offending file.

Can somebody pls confirm either way.

Ian.


#3 shadowwar

shadowwar

    Forum Deity

  • Moderators
  • PipPipPipPipPipPip
  • 2,878 posts

Posted 10 January 2012 - 01:48 PM

Thanks for reporting. This will be fixed in the next db update.
Rich Matteo
Research Engineer

Posted Image

Follow us: Twitter, Become a fan: Facebook

#4 IanJ

IanJ

    New Member

  • Members
  • Pip
  • 3 posts

Posted 10 January 2012 - 01:51 PM

View Postshadowwar, on 10 January 2012 - 01:48 PM, said:

Thanks for reporting. This will be fixed in the next db update.

So are you saying this is indeed a false positive?

I just want to be sure before I go run my Arduino system again.

Ian.

#5 shadowwar

shadowwar

    Forum Deity

  • Moderators
  • PipPipPipPipPipPip
  • 2,878 posts

Posted 10 January 2012 - 04:06 PM

Yes it is a false positive. If you update now it should no longer be detected.
Rich Matteo
Research Engineer

Posted Image

Follow us: Twitter, Become a fan: Facebook

#6 skamod

skamod

    New Member

  • Members
  • Pip
  • 1 posts

Posted 12 January 2012 - 05:55 AM

Hello, I seem to have more false positives (are they?) of this kind.

Attached files are reported as "exploit.drop.3p".

Regards.

Attached Files



#7 shadowwar

shadowwar

    Forum Deity

  • Moderators
  • PipPipPipPipPipPip
  • 2,878 posts

Posted 12 January 2012 - 07:39 PM

This should be fixed in the next update.

Thanks for posting the files
Rich Matteo
Research Engineer

Posted Image

Follow us: Twitter, Become a fan: Facebook

#8 catch33

catch33

    New Member

  • Members
  • Pip
  • 1 posts

Posted 16 January 2012 - 10:39 AM

Please, what is a false positive. I got the same thing that IanJ got (exploit.drop.3d). I wasn't running that program tho. My operating is is Windows 7 fully updated and I fully updated the Malwarebytes before I ran it last night. I removed them with your program. I was just wanting more infor about it. By reading this, I am understanding that the new updates for Malwarebytes witll not let it show up. But it did for me this morning.

#9 shadowwar

shadowwar

    Forum Deity

  • Moderators
  • PipPipPipPipPipPip
  • 2,878 posts

Posted 16 January 2012 - 11:57 AM

Can you please post a scan log for these detections? How to post a dev log is stickied in this forum.
Rich Matteo
Research Engineer

Posted Image

Follow us: Twitter, Become a fan: Facebook

#10 vjj

vjj

    New Member

  • Members
  • Pip
  • 3 posts

Posted 30 June 2012 - 12:41 PM

Hello, I have reports of exploit.drop.3 that I can't get rid off. Dunno if it is a false positive or a real thing. Please take a look at the attached report.

Each time I remove it and reboot the machine it will reappear in the next scan results.

Attached Files



#11 vjj

vjj

    New Member

  • Members
  • Pip
  • 3 posts

Posted 30 June 2012 - 12:43 PM

Attaching the suspected file as well.

Attached Files



#12 nosirrah

nosirrah

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 5,402 posts
  • Location:Northampton, MA USA

Posted 30 June 2012 - 02:25 PM

Fixed in the next update.
Bruce Harrison
Vice President of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users