Jump to content

Fatdcuk

Staff
  • Content Count

    20,722
  • Joined

Everything posted by Fatdcuk

  1. Hi and welcome to the Malwarebytes support forums. This is not a f/p detection as the installer is bundling 3rd party software. We are not alone in detecting the Filezilla bundle installer. https://www.virustotal.com/gui/file/2268e0f59b605ff74656c553658e5c17b3e046370f6ca3032764caaacb582934/detection
  2. Hi Sorry for any confusion as your other created topic did not say you had clients that were affected so the standard advice is to create ignore rules for working folders if you are creating new files locally which are triggering detection(s). However if any finished project(s) which are being distributed are detected then please submit detected file(s) to us so we can review and add it to our database of known good apps as well to prevent this in the future.
  3. Hi Did setting exclusion rule(s) for your working folders resolve the false positives alerts ?
  4. Hi and sorry to hear about your false positive issues with our machine learning. Please read the following for a more open explanation of how it works and how to mitigate against potential F/p detection(s) at the bottom of the article.
  5. Hi and sorry to intrude in your help session. It is quite possible SmartApp is protecting those proxy settings since it contains it own web proxy.. Are you in a position to uninstall SmartApp to verify this and then reinstall if you still wish to continue to use that software ?
  6. Hi all The f/p blocks have now been fixed. Please run an update to the most recent database. If however blocks persist then please restart your computer and this should clear any cached data.
  7. Hi The f/p blocks have now been fixed. Please run an update to the most recent database. If however blocks persist then please restart your computer and this should clear any cached data.
  8. Hi all The f/p blocks have now been fixed. Please run an update to the most recent database. If however blocks persist then please restart your computer and this should clear any cached data.
  9. Hi all The f/p blocks have now been fixed. Please run an update to the most recent database. If however blocks persist then please restart your computer and this should clear any cached data.
  10. Hi all The f/p blocks have now been fixed. Please run an update to the most recent database. If however blocks persist then please restart your computer and this should clear any cached data.
  11. Hi all The f/p blocks have now been fixed. Please run an update to the most recent database. If however blocks persist then please restart your computer and this should clear any cached data.
  12. Hi DPintaric and thank you for reporting this. Confirmed this is a false positive and we will get it fixed on the next update cycle today.
  13. Hi and welcome to the Malwarebytes support forums. Please see here -->
  14. Hi Ranjan Please update and run a new scan with Malwarebytes. Allow Malwarebytes to remove what it finds and then please restart your computer.
  15. Hi mytimbuk2 Please update and run a new scan with Malwarebytes. Allow Malwarebytes to remove what it finds and then please restart your computer.
  16. Hi Behaviour illustrated here could push software into being potentially unwanted by some users. https://www.ghacks.net/2016/06/10/amazon-assistant-privacy/
  17. Hi We detect this as Potentially Unwanted Program (PUP) however it may be wanted by some. The detections are safe to remove or if you would rather keep the extension then you can set an ignore rule for the detection so we no longer detect it on future scans. How to set an ignore rule in Malwarebytes --> https://support.malwarebytes.com/docs/DOC-1130
  18. Hi and sorry to leap into the topic. This was a web blocking false positive and the block has since been removed from the database. Please update Malwarbytes and restart the computer and the alerts should no longer persist.
  19. Hi This was a web blocking false positive and the block has since been removed from the database. Please update Malwarbytes and restart the computer and the alerts should no longer persist.
  20. Hi guys This was a web blocking false positive and the block has since been removed from the database. Please update Malwarbytes and restart the computer and the alerts should no longer persist.
  21. Hi whittlebrother This would be the extension that is generating our detections. https://chrome.google.com/webstore/detail/weather-forecast/ldoppemlampfgljcabioniofhcclcebn We detect this as Potentially Unwanted Program (PUP) however it may be wanted by some. The detections are safe to remove or if you would rather keep the extension and no longer receive any alerts for it then you will need to set an ignore rule for the following folder. C:\USERS\FRED\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Extensions\ldoppemlampfgljcabioniofhcclcebn How to set an ignore rule in Malwarebytes --> https://support.malwarebytes.com/docs/DOC-1130
  22. Thanks Samuel Confirmed this is a F/p and will get it fixed.
  23. Hi PeterCascio The extension was found injecting a remote script which breaches Mozilla Extension rules. https://bugzilla.mozilla.org/show_bug.cgi?id=1549444 So this is not a false postive detection but now considered PUP.
  24. Hi pssnn Thank you for reporting this and confirmed it is a false positive detection. This will get fixed on the next update cycle today.
  25. Fatdcuk

    FP

    Hi , Detection was created for the extension initially as it breached Mozilla privacy criteria and in our opinion that constituted it becoming Potentially Unwanted Program (PUP). However they have since modified/updated their extension (21/02/2019) to comply with Mozilla extension privacy rules so we will be removing detection for their current firefox extension. However we will remain vigilant and should they relapse then we would relist the offending extension(s) again in the future.
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.