in

eEye Digital Security

The endpoint to vulnerability starts here.

 

MediaMonkey_Setup_2_5_5.exe -- False positive?

Last post 11-02-2007 9:58 PM by Brent. 1 replies.
Page 1 of 1 (2 items)
Sort Posts: Previous Next
  • 11-02-2007 6:37 PM

    MediaMonkey_Setup_2_5_5.exe -- False positive?

    This is from my log today.  AntiVirus Version 1.0.254

      Event ID:  BLINK-MAL-205 
     Severity:  High 
     Description:  Blink has found a malware application 
     Virus found: Keylog.CJI
     Item found: C:\Program Files\MediaMonkey\downloads\MediaMonkey_Setup_2_5_5.exe
     Action: Repair
     Alert: Yes
     Name: Keylog.CJI
     Second Action: Quarantine
     Category: Trojan

     

    NOTE: I had run  a  scan using Blink's AntiVirus Version 1.0.251  a few minutes prior to doing an Update to Version 1.0.254. This earlier version did NOT ring the bell on the new MediaMonkey 2.5.5 setup file. A Google search shows that MM setup 2.5.5 is not malware according to most AVs. However, AntiVir PE states that MM2.5.5 is Is the "Trojan horse TR/GAgent.58675"

     

    So.... is this a false positive?  

     

    Similarly, Blink version 1.0.254 also logs:

     Event ID: BLINK-MAL-205
     Severity: High
     Description: Blink has found a malware application
     Virus found: Keylog.CJN
     Item found: C:\Program Files\Eraser\eraser582setup-i386.exe
     Action: Repair
     Alert: Yes
     Name: Keylog.CJN
     Second Action: Quarantine
     Category: Trojan

     whereas version 1.0.251 did not.

     Another false positive? 

    Thanks 

     

  • 11-02-2007 9:58 PM In reply to

    Re: MediaMonkey_Setup_2_5_5.exe -- False positive?

    There seems to have been mutiple malware changes in the last update as I ran into one also..

    Probably have to submit this to see if it is just a false positive so the DB can be updated..

     

Page 1 of 1 (2 items)
© 1995 - 2009 eEye Incorporated