Reporting False Positive? Browser Helper Object {c9c42510-9b41-42c1-9dcd-7282a2d07c61}

[onednora]

IObit Malware Fighter

 

OS: Windows 7

Version: 2.2.1.2

Define Version: 1308

Time Elapsed: 00:36:35

Objects Scanned: 72415

Threats Found: 2

Save Time: 1/30/2014 9:02:00 PM

 

|Name|Type|Description|ID|

Malware GUID, GUID, HKEY_CLASSES_ROOT\CLSID\{c9c42510-9b41-42c1-9dcd-7282a2d07c61}, 408861

Malware GUID, GUID, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c9c42510-9b41-42c1-9dcd-7282a2d07c61}, 408861

 

I've Googled the "c9c..." registry files and found it to be part of some kind of Malware called FAK.AV. or something like that. It supposed to create a phony Anti-Virus warning similar to the Windows basic one.

 

Just ran the scan again and it came back:

IObit Malware Fighter

 

OS: Windows 7

Version: 2.2.1.2

Define Version: 1309

Time Elapsed: 00:43:13

Objects Scanned: 72456

Threats Found: 2

Save Time: 1/31/2014 8:07:02 PM

 

|Name|Type|Description|ID|

Malware GUID, GUID, HKEY_CLASSES_ROOT\CLSID\{c9c42510-9b41-42c1-9dcd-7282a2d07c61}, 408861

Malware GUID, GUID, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c9c42510-9b41-42c1-9dcd-7282a2d07c61}, 408861

[Octavian]

IObit Malware Fighter

 

OS: Windows 7

Version: 2.2.1.2

Define Version: 1308

Time Elapsed: 00:36:35

Objects Scanned: 72415

Threats Found: 2

Save Time: 1/30/2014 9:02:00 PM

 

|Name|Type|Description|ID|

Malware GUID, GUID, HKEY_CLASSES_ROOT\CLSID\{c9c42510-9b41-42c1-9dcd-7282a2d07c61}, 408861

Malware GUID, GUID, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c9c42510-9b41-42c1-9dcd-7282a2d07c61}, 408861

 

I've Googled the "c9c..." registry files and found it to be part of some kind of Malware called FAK.AV. or something like that. It supposed to create a phony Anti-Virus warning similar to the Windows basic one.

 

Just ran the scan again and it came back:

IObit Malware Fighter

 

OS: Windows 7

Version: 2.2.1.2

Define Version: 1309

Time Elapsed: 00:43:13

Objects Scanned: 72456

Threats Found: 2

Save Time: 1/31/2014 8:07:02 PM

 

|Name|Type|Description|ID|

Malware GUID, GUID, HKEY_CLASSES_ROOT\CLSID\{c9c42510-9b41-42c1-9dcd-7282a2d07c61}, 408861

Malware GUID, GUID, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c9c42510-9b41-42c1-9dcd-7282a2d07c61}, 408861

 

This can be a false positive, upload a link from virustatal.com with the result of scan.

[enoskype]

@ Octavian, now you can describe in details how onednora is going to do that!

 

Cheers.

[onednora]

Not false positives

 

I've looked into it already, which I stated in my original post.

I just want to know how to stop Malware Fighter Pro (the one I paid for) from marking them as false positives and quarantine it before it infects anymore of my computer.

:evil:

[enoskype]

Hi onednora, welcome to IObit Forums! :-D

 

Sorry that I did not understand what you have wanted in your first post.

 

Normally, false positives (that the user thinks) is posted in this section following the procedures described and IObit responds by redefining their database if it is a false positive and informs the db version which it is corrected.

 

Procedure is as follows:

After posting the IObit Malware Fighter analysis report, a user has to upload the file to VirusTotal and give the analysis report link in user's next post together with the uploaded link of the file as a zip file in a server as Wikisend.

 

In your case, since the malware (suspicious) is in your registry, you can not upload them to VirusTotal directly without exporting them as a .reg file to a location of your choice, that's why I asked Octavian to describe that in details.

 

Please click the Repair button of IObit Malware Fighter to delete the ones you have reported.

 

FYI, IMF does not make any file, malware, etc. as false positives, but it gives the user the option of asking for it in the forum if it is a false positive.

 

I would also suggest to update your IMF to version 2.3.

 

The setup file can be downloaded from the link in IObit Malware Fighter 2.3 (2.3.0.8) is released! thread.

 

 

Cheers.

[onednora]

Thank you

 

I'll let you know if the newer version fixes it.

[onednora]

Same results as before.

 

I clicked repair, but I'm sure it'll come up again on my next scan as it's been doing for the last two weeks.

 

IObit Malware Fighter

OS: Windows 7

Version: 2.3.0.8

Define Version: 1309

Time Elapsed: 00:38:20

Objects Scanned: 72879

Threats Found: 2

Save Time: 2/2/2014 8:24:31 PM

 

|Name|Type|Description|ID|

Malware GUID, GUID, HKEY_CLASSES_ROOT\CLSID\{c9c42510-9b41-42c1-9dcd-7282a2d07c61}, 408861

Malware GUID, GUID, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c9c42510-9b41-42c1-9dcd-7282a2d07c61}, 408861

[Cicely]

Hi there,

 

Sorry for my late reply.

 

Yeah, it is a fase positive and it will be removed in Database version 1311.

 

Thanks all of to help us improve our products. Cheers. :-D