Malwarebytes False Positive

[Syzich]

I'm pretty sure what I'm seeing in my most recent Malwarebytes log is a false positive:

Malwarebytes' Anti-Malware 1.33
Database version: 1725
Windows 6.0.6001 Service Pack 1

2/4/2009 9:12:18 AM
mbam-log-2009-02-04 (09-12-06).txt

Scan type: Full Scan (C:\|)
Objects scanned: 88718
Time elapsed: 55 minute(s), 2 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Program Files\K-Lite Codec Pack\Tools\CodecTweakTool.exe (Adware.SearchIt99) -> No action taken.

I have the k-lite codec pack installed on both of my computers and just ran a scan with Malwarebytes on the other one(XP Desktop) on Monday and the results on that were clean. So without updating to the most recent updates on the other computer, I manually scanned codectweaktool.exe to double check and it showed as clean. So, has anyone else with the k-lite codec pack noticed this? Should I just ignore the results and wait for a new update?

[fink]

I would submit the codectweaktool.exe here..

http://www.virustotal.com/

for a multiscan. If confirmed then delete it (do you use the program?) if not confirmed then wait for a couple of days worth of updates from Malwarebytes to see what happens.

I have both Malwarebytes and a fairly recent version of klite and have had no problems/warnings (as
of my last system malware scan on Sunday)

My version of codectweaktool is 51.49.0.0. I scanned it today w/malwarebytes and it gives the same warning as you got. I submitted it to the multiscan site and it came up totally clean.

I'd say false positive but I'll wait a few days to see what new malwarebyte dat files will do.

Just for the heck of it I ran the tweaktool to see what would happen... nothing unusual... which further points to a false positive.

[fink]

I submitted it to Malwarebytes as a possible false positive.

http://www.malwarebytes.org/forums/i...howtopic=10826

[fink]

Was a false positive, now fixed. They're really fast. Confirms to me what a good piece of software this is.

[Broni]

I want to say big DITTO.
I had experienced very same rapid response from them on couple of occasions.
Frankly, I've never seen any software company like that before.

[Syzich]

Thanks for submitting the file and confirming the false positive, fink .

[fink]

No problem

I would have waited for a fix but saw that no one else had made the submission so I just went and did it. The klite suites are pretty well distributed/used so eventually a lot of people would have started getting the FP's... I just didn't feel like waiting.