Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Can Malwarebytes Program Contain a Trojan?


  • Please log in to reply

#1
Webslinger64

Webslinger64

    Member

  • Member
  • PipPipPip
  • 567 posts
Unsure what to make of this. My anti-virus program is Avast. Today while running a scan on my computer with Malwarebytes, Avast alerted me to the following:

MALWARE BLOCKED

avast! File System Shield has blocked a threat.
No further action is required.

Object: C:\System Volume Information\_restore{444...\A0111744.exe
Infection: Win32:Trojan-gen
Action: Moved to chest
Process: C:\Program Files\Malwarebytes'Anti-Malware\mbam.exe

The threat was detected and blocked just before the file was executed.

So, does this mean there is a trojan of some sort hiding in my Malwarebytes program?
  • 0

Advertisements


#2
miekiemoes

miekiemoes

    Malware Expert

  • Member
  • PipPipPipPipPipPipPipPip
  • 5,503 posts
  • MVP
Hi,

You don't have to worry here. Your Avast is acting WHILE malwarebytes was scanning.
The mailicious item is C:\System Volume Information\_restore{444...\A0111744.exe here, so while you were scanning with malwarebytes, it detected that item, but since you also have Avast running as a realtime scanner, at the same time, it enumerates the entries that Malwarebytes is scanning and actually detects the same file. And that's why Avast lists C:\Program Files\Malwarebytes'Anti-Malware\mbam.exe as the process since this entry was intercepted by Malwarebytes :-)
  • 0

#3
Webslinger64

Webslinger64

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 567 posts

Hi,

You don't have to worry here. Your Avast is acting WHILE malwarebytes was scanning.
The mailicious item is C:\System Volume Information\_restore{444...\A0111744.exe here, so while you were scanning with malwarebytes, it detected that item, but since you also have Avast running as a realtime scanner, at the same time, it enumerates the entries that Malwarebytes is scanning and actually detects the same file. And that's why Avast lists C:\Program Files\Malwarebytes'Anti-Malware\mbam.exe as the process since this entry was intercepted by Malwarebytes :-)


Thank you for the reply and clarification. That makes sense now that you have explained it. Always nice to learn a little something whenever possible.
  • 0

#4
miekiemoes

miekiemoes

    Malware Expert

  • Member
  • PipPipPipPipPipPipPipPip
  • 5,503 posts
  • MVP
You're most welcome :D
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP