Jump to content


Photo

False positive USBFix.exe


  • Please log in to reply
3 replies to this topic

#1 anthony5151

anthony5151

    New Member

  • Members
  • Pip
  • 7 posts
  • Gender:Male
  • Location:France

Posted 14 January 2009 - 12:32 AM

Hello,


USBFix (created by Chiquitine29) is a french software that is used to disinfect USB flash disks.
USBFix.exe is the installation file of this software : it is detected as Trojan.FakeAlert by MBAM, but it is a false positive.
It can be downloaded here : http://sd-1.archive-...3188/UsbFix.exe

Here is a virustotal scan of the file : http://www.virustota...4bc811dd8df04e0
There is only 2/38 detections. I think it is due to "process.exe". This is an element of the tool that is discerned by some antiviruses as RiskTool. It is a virus, but an utility intended to put an end to processes.


Here is the MBAM developer log :


Malwarebytes' Anti-Malware 1.32
Database version: 1648
Windows 6.0.6000

14/01/2009 05:58:19
mbam-log-2009-01-14 (05-58-13).txt

Scan type: Quick Scan
Objects scanned: 43358
Time elapsed: 2 minute(s), 36 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\UsbFix.exe (Trojan.FakeAlert) -> No action taken. [38575351343053838075667915396676703477708385130136276186841115708970]

#2 anthony5151

anthony5151

    New Member

  • Members
  • Pip
  • 7 posts
  • Gender:Male
  • Location:France

Posted 14 January 2009 - 12:43 AM

I think it is due to "process.exe". This is an element of the tool that is discerned by some antiviruses as RiskTool. It is not a virus, but an utility intended to put an end to processes.


I have forgotten a word, sorry :)

#3 Raid

Raid

    Malware Researcher

  • Experts
  • PipPipPipPipPipPip
  • 1,552 posts
  • Gender:Male
  • Location:United States

Posted 14 January 2009 - 12:54 AM

Will be fixed in next update. thanks!

#4 anthony5151

anthony5151

    New Member

  • Members
  • Pip
  • 7 posts
  • Gender:Male
  • Location:France

Posted 15 January 2009 - 12:56 PM

Will be fixed in next update. thanks!


USBFix is not any more detected by MBAM.
Thanks.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users