ntbackup.exe, Vtf.dll, cnmbjun5.dll FPs?

[robkay]

IObit Security 360

 

OS:Windows XP

Version:1.5.0.13

Define Version:2059

Time Elapsed:00:26:13

Objects Scanned:68711

Threats Found:9

 

|Name|Type|Description|ID|

Tracking Cookies, Cookies, Cookie:desktop user@realmedia.com/, 7-18

Tracking Cookies, Cookies, Cookie:desktop user@advertising.com/, 7-12

Tracking Cookies, Cookies, Cookie:desktop user@www.att.com/, 7-1652

Tracking Cookies, Cookies, Cookie:desktop user@nbcuni.com/, 7-1997

Tracking Cookies, Cookies, Cookie:desktop user@fastclick.net/, 7-1401

Trojan.Agent, File, C:\i386\ntbackup.exe, 12-2814

Trojan.Agent, File, C:\WINDOWS\$NtServicePackUninstall$\ntbackup.exe, 12-2814

Spyware.Password, File, C:\Program Files\IrfanView\Plugins\Vtf.dll, 12-1360

Trojan.Downloader, File, C:\BJPrinter\CNMWINDOWS\Canon S750 Installer\Inst\cnmbjun5.dll, 11-15663

 

----------

 

I'm not concerned about the tracking cookies, of course, but the four possible infected files at the bottom of the log. OK, two of the four are attached here. The other two are over a meg so I guess I will have to upload them to another location. Thanks.

suspiciousfiles4iobit-1.zip

suspiciousfiles4iobit-2.zip

[hxin]

IObit Security 360

 

OS:Windows XP

Version:1.5.0.13

Define Version:2059

Time Elapsed:00:26:13

Objects Scanned:68711

Threats Found:9

 

|Name|Type|Description|ID|

Tracking Cookies, Cookies, Cookie:desktop user@realmedia.com/, 7-18

Tracking Cookies, Cookies, Cookie:desktop user@advertising.com/, 7-12

Tracking Cookies, Cookies, Cookie:desktop user@www.att.com/, 7-1652

Tracking Cookies, Cookies, Cookie:desktop user@nbcuni.com/, 7-1997

Tracking Cookies, Cookies, Cookie:desktop user@fastclick.net/, 7-1401

Trojan.Agent, File, C:\i386\ntbackup.exe, 12-2814

Trojan.Agent, File, C:\WINDOWS\$NtServicePackUninstall$\ntbackup.exe, 12-2814

Spyware.Password, File, C:\Program Files\IrfanView\Plugins\Vtf.dll, 12-1360

Trojan.Downloader, File, C:\BJPrinter\CNMWINDOWS\Canon S750 Installer\Inst\cnmbjun5.dll, 11-15663

 

----------

 

I'm not concerned about the tracking cookies, of course, but the four possible infected files at the bottom of the log. OK, two of the four are attached here. The other two are over a meg so I guess I will have to upload them to another location. Thanks.

Hi robkay

The two files (Vtf.dll, and cnmbjun5.dll) are false positives.

You can upload the other files to www.wikisend.com and give us the link.

THANKS

[robkay]

Hi robkay

The two files (Vtf.dll, and cnmbjun5.dll) are false positives.

You can upload the other files to www.wikisend.com and give us the link.

THANKS

 

Alright, thanks for checking them out. Here are the links to the two other files:

 

suspiciousfiles4iobit-3.zip

 

suspiciousfiles4iobit-4.zip

 

Now these were actually both the same filename, but located in different folders. Whether the files are virtually identical I do not know as I did not do a compare. iobit did, however flag both of them as potentially infected.

 

BTW, per the instructions in the other thread I tried emailing them as attachments, but received a message back that delivery of the email failed.

 

Thanks again for checking them out.

 

EDIT : Letter (w ) is added to the beginning of wikisend addresses (wwikisend) to stop the download of wrong files.

[robkay]

Any word on the 2 files above which I uploaded to wikisend? Thanks.

[enoskype]

Attention!

 

Hi robkay,

 

The uploaded files are nothing to do with ntbackup.exe files

 

One is 23.7 MB Fitness Khoparkhairne.cdr file.

 

The other one is 4.5 KB Documento di Microsoft Word.doc file with password to downlod.

 

Upload the correct files again to Wikisend and give the download links here.

 

Upload both ntbackup.exe files to VirusTotal seperately and let them analyzed again. Give the analysis links here.

 

Cheers.