3 replies to this topic

[spryteLy]

I downloaded a file which Malwarebytes reports a trojan... I am trying to send a notice of a possible false positive, as all other scans are clean, but I do not how to get the Developer mode you speak of for this function.
My workflow:
Opera download manager > Select FIle & Right Click > Advanced > Scan with Malwarebytes...

Any ideas?

[nosirrah]

You can also zip and attach the file here or provide a download link.

[spryteLy]

I will give you the link:

the web page is: http://math.exeter.e...is/winplot.html

the file is: http://math.exeter.e...eanut/wp32z.exe

I have emailed the developer and he has run his Kaspersky and it came out clean.
I have also run AVG 2012 and SpyBot Search & Destroy and they both read a clean file.

Log file:
Snip>>>

Malwarebytes Anti-Malware 1.60.1.1000
www.malwarebytes.org

Database version: v2012.04.01.02

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Lyman :: ZX81A [administrator]

4/4/2012 11:32:29 AM
mbam-log-2012-04-04 (11-32-29).txt

Scan type: Custom scan
Scan options enabled: File System | Heuristics/Shuriken | PUP | PUM | P2P
Scan options disabled: Memory | Startup | Registry | Heuristics/Extra
Objects scanned: 1
Time elapsed: 15 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 1
C:\Downloadz\Peanut\wp32z.exe (Trojan.Dropper) -> Quarantined and deleted successfully.

(end)
<<<Snip

Regards

[nosirrah]

This will be fixed in the next update