Malwarebyte installer is trojan ?

[DarkSlay3r]

Perhaps you guys think I'm lying about this,but I downloaded the installer of malwarebyte today on Malwarebytes Anti-Malware - CNET Download.com

The link I got from its official website,there is no doubt it's either phishing or slander.

After downloaded,kaspersky's real time protection doesn't detect it as virus yet.Later on,I found my yahoo mail and hotmail accessed from other region and my MMOG account been stolen then I scanning entire PC then found it..

I do not know whether it's false positive.Those advanced users or who have experience against trojan please make a test about it.

Here is the proof of my kaspersky pure 2 detection

I'm sure of it because my information and data exposed (Checked via yahoo notice) after I downloaded malwarebyte installer.

 

[linnemeyerhere]

Good lesson here, always go to the manufacturers site and get your downloads and drivers from them.

 

[ignatzatsonic]

You can upload it here:

https://www.virustotal.com/

where it will be scanned by many different tools.

I can't say I'm completely surprised. I have heard that recently CNET is deliberately letting certain add-ons be included with their downloads.

I'd get Malwarebytes from Malwarebytes.org; nowhere else.


Malwarebytes : Malwarebytes Anti-Malware PRO removes malware including viruses, spyware, worms and trojans, plus it protects your computer

 

[DarkSlay3r]

You can upload it here:

https://www.virustotal.com/

where it will be scanned by many different tools.

I can't say I'm completely surprised. I have heard that recently CNET is deliberately letting certain add-ons be included with their downloads.

I'd get Malwarebytes from Malwarebytes.org; nowhere else.


Malwarebytes : Malwarebytes Anti-Malware PRO removes malware including viruses, spyware, worms and trojans, plus it protects your computer

Well,I was take its homepage link

 

[seavixen32]

You may have been taken to a page that looked similar, but I can assure you that the genuine Malwarebytes site would not have infected your computer.

Malwarebytes : Malwarebytes Anti-Malware PRO removes malware including viruses, spyware, worms and trojans, plus it protects your computer

 

[Golden]

I agree with Andy, but I've also asked Siri at the Malwarebytes site to comment on this. So far, I haven't yet found this reported there.

Regards,
Golden

 

[DarkSlay3r]

You may have been taken to a page that looked similar, but I can assure you that the genuine Malwarebytes site would not have infected your computer.

Malwarebytes : Malwarebytes Anti-Malware PRO removes malware including viruses, spyware, worms and trojans, plus it protects your computer

I'm sure it's official website base on its domain Malwarebytes : Free anti-malware, anti-virus and spyware removal download .In any case I must admitted that before I format my pc,I trusted the malwarebyte very well.However I do not fully trust cnet

The hyperlink from Malwarebytes : Free anti-malware, anti-virus and spyware removal download 'Download' taken user to cnet for download.

P/S : I can't upload it on virus total because I have quarantined it to prevent HIM access to my information.Plus starter version doesn't include the sandbox software.

 

[ignatzatsonic]

The hyperlink from Malwarebytes : Free anti-malware, anti-virus and spyware removal download 'Download' taken user to cnet for download.

That's strange.

That link takes me to Malwarebytes.org. The link there takes me here, at bleepingcomputer.com.


Download MalwareBytes Anti-Malware 1.61.0.1400

 

[Golden]

Following the download link from Malwarebytes takes me to MajorGeeks. I have scanned this exe using VirusTotal, and there is one hit......but I'd be 99% sure this is a FP.



https://www.virustotal.com/url/fc85...6c8e52b19b9584f6f126a68d/analysis/1337176143/

 

[DarkSlay3r]

From your virus total link,at file scan has a hyperlink takes me to malwarebyte installer,same as my result,only kaspersky considered it as trojan.
https://www.virustotal.com/file/173275e3f0d4930eee2f8bf1c282047c577b4dca39ff68bfe83d9c60b23bf860/analysis/1337176147/
So the conclusion is kaspersky does false positive ?

 

[Golden]

Could very well be - my suggestion is to post this information in the Kaspersky forums.

Have you ever had a malware infection on this PC before?

 

[DarkSlay3r]

Could very well be - my suggestion is to post this information in the Kaspersky forums.

Have you ever had a malware infection on this PC before?

Before I install kaspersky pure 2,I was a NOD32 user and malwarebyte,even both I uses both together,however my performance doesn't get slow by both cause.

Yes I do,malwarebyte had helps me detected some of china software as malware/trojan.

 

[Golden]

Hi,

Looking back through some of your other threads, I can't help but conclude you have had a troubled system - many threads seem to be unresolved. I wonder if there are still remnants of previous anti-malware products on you system, or even undetected malware.

My suggestion is to stop experimenting with all these suites. Turn off the resident kaspersky (do you have others installed?) and run a scan using ESET on-line scanner, and post the results back here:

ESET :: Get a FREE Online Virus Scan

My gut instinct is your current issue is a not obvious? browser re-direction, or an existing infection playing havoc with your system.

Regards,
Golden

 

[DarkSlay3r]

Nope,while kaspersky installing,it auto removed malwarebyte.And I removed NOD32 in safe mode,thus I'm sure there is no other AV.

What I wondering is how does a hacker got into my yahoo mail and hotmail without any malicious code spyware and keylogger etc to steal password from me,it doesn't make sense.After I realized and I run full scan,found only is the malwarebyte installer.

Furthermore,I checked yahoo notification,it writes an unknown access from other region into account only today and the trojan I found also today.If it's a false positive from kaspersky,what would the thing causes my information been stole ?

 

[kado897]

I noticed that when I was testing VTChromizer the other day. I got exactly the same results for the latest Malwarebytes. I assumed it a false positive.

The Free link redirects to CNET and has for the past few months.

 

[Golden]

Hi,

I recommend running the ESET on-line scanner - lets take it from there.

Regards,
Golden

 

[Maurice Naggar]

@DarSlay3r
Regarding MBAM setup and the Kaspersky "quarantine" of it:
You had a Fasle positive from Kaspersky.
Miekiemoes says

Kaspersky already fixed this False Positive, so it won't be detected anymore in a next definitions update.

ref Trojan FP? - Malwarebytes Forum

Good luck on the rest.

 

[Maurice Naggar]

Nope,while kaspersky installing,it auto removed malwarebyte.And I removed NOD32 in safe mode,thus I'm sure there is no other AV.

What I wondering is how does a hacker got into my yahoo mail and hotmail without any malicious code spyware and keylogger etc to steal password from me,it doesn't make sense.After I realized and I run full scan,found only is the malwarebyte installer.

Furthermore,I checked yahoo notification,it writes an unknown access from other region into account only today and the trojan I found also today.If it's a false positive from kaspersky,what would the thing causes my information been stole ?

@Darkslay3r
Email accounts can be hacked & are all the time, and yahoo & hotmail are quite popular targets.
Did you cure your hacked accounts? ie, report them AND change your password?

Seems to me you need to do a full set of checks for viruses and malware.
{Your Kaspersky gave you a false positive, as noted elsewhere).

On some regular schedule, it is a good idea to do an online scan for viruses and malware. Here is a very short list of sites where this may be done:
ESET Online Scanner
Panda ActiveScan
Trend Micro Housecall
F-Secure Online Scanner