Is this really a trojan?

Discussion in 'other anti-malware software' started by sweater, Jan 23, 2011.

Thread Status:
Not open for further replies.
  1. sweater

    sweater Registered Member

    Joined:
    Jun 24, 2005
    Posts:
    1,678
    Location:
    Philippines, the Political Dynasty Capital of the
    I was surprised. When I first scan my pc with SuperAntispyware it didn't detect this as trojan but it just found three other spywares. But when I run the scan for Malwarebytes Anti-Malware it found this thing one program installed on my pc as trojan. :doubt:

    What do you think of this? o_O Or...is this is just another false positives?
     

    Attached Files:

  2. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    Upload the file to Virus Total and see what comes out; also send it to Malwarebytes team.

    I'm not familiar with that application, but if it's a safe application, then I'd false positive, or something could have infected that process.
     
  3. AvinashR

    AvinashR Registered Member

    Joined:
    Dec 26, 2009
    Posts:
    2,060
    Location:
    New Delhi Metallo β-Lactamase 1
    No its not a trojan.. Its legit application with having a digital signature unless and until you are using genuine software of USB Safely Remove..
     
  4. EliteKiller

    EliteKiller Registered Member

    Joined:
    Jan 18, 2007
    Posts:
    1,138
    Location:
    TX
    What "spywares" did SAS detect? cookies? Please post the scan log so we can have a peek.

    It could be malware: http://www.threatexpert.com/files/usr.exe.html
    Post FP's here: http://forums.malwarebytes.org/index.php?showforum=42
     
  5. tesk

    tesk Registered Member

    Joined:
    Aug 9, 2007
    Posts:
    100
    I use the latest version of USb Safely Remove and just scanned my system an hour ago and it did not detect anything.
     
  6. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,890
    Location:
    Canada
    maybe a false alarm;)
     
  7. Franklin

    Franklin Registered Member

    Joined:
    May 12, 2005
    Posts:
    2,517
    Location:
    West Aussie
    usr.exe - 0/43 - MD5 : b61add07f0b6b07f7eed711838cad138
    SHA1 : 103405c0f75e9e61e0be2dd622d65403e49add91
     
  8. tipo

    tipo Registered Member

    Joined:
    Dec 29, 2008
    Posts:
    408
    Location:
    romania
    let him upload it to virustotal and then give him advices. i had the same trojan a moth ago detected by kaspersky and what do you know? it was a trojan according to virustotal (~30/43)
    the difference was that mine was located in system32 (never used usb safely remove), but maybe the trojan is now infecting other .exes
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.