Jump to content

Malwarebytes

False NEGATIVE - auto.exe


3 replies to this topic

#1
centralkong

    Advanced Member

  • Honorary Members
  • PipPipPip
  • 101 posts
  • Gender:Male
  • Location:A mason in Archades
Hi there,
I got across a nice Autorun-based sample today, auto.exe, which has been lurking in my IT classroom since I can remember.
But the strangest thing is, MBAM scanned it and returned, "No malicious elements were found." :S
If you want me to send you a sample, feel free to ask.
Here goes VirusTotal's report: https://www.virustotal.com/es/analisis/d79e...d8f1-1257293829

Cheers!

P/S: I'm not sure if this was posted in the right forum. If it's not, I apologise, and please move it to the right place. ;)

#2
exile360

    exile

  • Moderators
  • PipPipPipPipPipPip
  • 12,959 posts
  • Gender:Male
Greetings ;) .

Your VT result says it all. Every major AV vendor on VT detects the sample already, hence the reason MBAM wouldn't detect it as it's designed to go after the current threats that get missed by the other vendors. For future reference though, you can submit new samples to uploads.malwarebytes.org :) .
Samuel E Lindsey
Product Manager

Posted Image

Follow us: Twitter, Become a fan: Facebook

#3
centralkong

    Advanced Member

  • Honorary Members
  • PipPipPip
  • 101 posts
  • Gender:Male
  • Location:A mason in Archades
Damn right you are. :) I like plugging my friend's USB drives and seeing how MBAM eats and eats Brontoks, rootkits and OnlineGames :) while avast! doesn't even say a word (I hate those pop-up windows that avast! uses for alerting).
Thanks for the explanation!

#4
exile360

    exile

  • Moderators
  • PipPipPipPipPipPip
  • 12,959 posts
  • Gender:Male
You're quite welcome :)
Samuel E Lindsey
Product Manager

Posted Image

Follow us: Twitter, Become a fan: Facebook





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

Follow Us