Is this really a trojan?

Discussion in 'other anti-malware software' started by sweater, Jan 23, 2011.

Thread Status:
Not open for further replies.
  1. sweater

    sweater Registered Member

    Joined:
    Jun 24, 2005
    Posts:
    1,674
    Location:
    Philippines, the Political Dynasty Capital of the
    I was surprised. When I first scan my pc with SuperAntispyware it didn't detect this as trojan but it just found three other spywares. But when I run the scan for Malwarebytes Anti-Malware it found this thing one program installed on my pc as trojan. :doubt:

    What do you think of this? o_O Or...is this is just another false positives?
     

    Attached Files:

  2. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    Upload the file to Virus Total and see what comes out; also send it to Malwarebytes team.

    I'm not familiar with that application, but if it's a safe application, then I'd false positive, or something could have infected that process.
     
  3. AvinashR

    AvinashR Registered Member

    Joined:
    Dec 26, 2009
    Posts:
    2,060
    Location:
    New Delhi Metallo β-Lactamase 1
    No its not a trojan.. Its legit application with having a digital signature unless and until you are using genuine software of USB Safely Remove..
     
  4. EliteKiller

    EliteKiller Registered Member

    Joined:
    Jan 18, 2007
    Posts:
    1,138
    Location:
    TX
    What "spywares" did SAS detect? cookies? Please post the scan log so we can have a peek.

    It could be malware: http://www.threatexpert.com/files/usr.exe.html
    Post FP's here: http://forums.malwarebytes.org/index.php?showforum=42
     
  5. tesk

    tesk Registered Member

    Joined:
    Aug 9, 2007
    Posts:
    100
    I use the latest version of USb Safely Remove and just scanned my system an hour ago and it did not detect anything.
     
  6. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    maybe a false alarm;)
     
  7. Franklin

    Franklin Registered Member

    Joined:
    May 12, 2005
    Posts:
    2,517
    Location:
    West Aussie
    usr.exe - 0/43 - MD5 : b61add07f0b6b07f7eed711838cad138
    SHA1 : 103405c0f75e9e61e0be2dd622d65403e49add91
     
  8. tipo

    tipo Registered Member

    Joined:
    Dec 29, 2008
    Posts:
    408
    Location:
    romania
    let him upload it to virustotal and then give him advices. i had the same trojan a moth ago detected by kaspersky and what do you know? it was a trojan according to virustotal (~30/43)
    the difference was that mine was located in system32 (never used usb safely remove), but maybe the trojan is now infecting other .exes
     
Thread Status:
Not open for further replies.