9 replies to this topic

[szpon5]

Welcome.
Malwarebytes indicates that the Windows Live Mesh, in file WLSync.exe is a threat.
The file is located by default in C:\Program Files\Windows Live\Mesh

[shadowwar]

Please attach a scan log of the detection and the wlsync file in zip format please.

Thanks.

[szpon5]

I'm very sorry, because I forgot to change the language in program on English.
Can there be a log in Polish? Do not make you a big problems?

If you need scan log in language English, it write, and will change the language on English in the program and repeat the scan.

Screen after the scan:
http://img221.images...76/obraz2vg.jpg

File .zip with scan log and file WLSync.exe
http://speedy.sh/Dm4wy/WLSync.zip

[szpon5]

In addition to the file, look at the registry value. You'll see it in the scan log and on screen.

[miekiemoes]

Hi,

Thanks for reporting this. This was indeed a false positive and will be fixed in next update. However, You do have an uncommon install though which triggered our heuristics.
Anyway, please let me know if this is fixed in next update (should be from database version v2012.06.05.03 and up)

[szpon5]

miekiemoes, on 05 June 2012 - 04:29 AM, said:

Thanks for reporting this. This was indeed a false positive and will be fixed in next update.

Thank you very much for explanation

miekiemoes, on 05 June 2012 - 04:29 AM, said:

However, You do have an uncommon install though which triggered our heuristics.
Anyway, please let me know if this is fixed in next update (should be from database version v2012.06.05.03 and up)

I'm very sorry, but I do not understand, what you mean? I have a version database v2012.06.03.06. Now I updated and have already v2012.06.05.06. But yesterday when the scanning and I sent the scan log, I had a version of the database v2012.06.03.06.

[miekiemoes]

This FP was fixed in database v2012.06.05.03, so if you updated, it shouldn't be detected anymore

[szpon5]

Thank you very much for the repair, thank you

And yet entirely other question: What does shortcut FP?

[miekiemoes]

FP means False Positive

[szpon5]

Thank you very much