NDR141

Thank-you for the confirmation, And Thankyou Porthos

Hi, I just wanted to check, now that my post has been moved to the correct section, if anyone from the FP section should check to see if this AI warning was a true false positive. It seems like the work that prothos did was correct, as when I restored the file and have scanned again, I haven't had anything come back as detected. Thanks for taking the time to confirm.

That sounds like good news. I have three questions now. 1.) should I wait to do another threat scan until I hear from the expert in the FP section, when this topic is moved to the correct section? 2.) This might be a stupid question, but should i be concerned that this file can be downloaded from this forum? I see that it is a client setup file. Just want to make sure its nothing identifiable to my specific computer 3.) Can I now delete the copied file and zip folder from my desktop? Thankyou

I hope i did this correctly. Thankyou for walking me through this ScreenConnect.ClientSetup.zip

Ok. Just so I'm clear. I will click restore on the quarantined file, and then it will give me an option to copy it to the desktop, where I will be able to right click and compress into a zip file. After I have done that do I delete the file on the desktop? Will this impact the app if its a FP? I apologize for the simple questions, I just want to make sure I do this properly. Instinctively, it seems like a bad idea to restore the "possible" malware, so I want to make sure I do this in the right order.

I also initiated a ticket, where I sent the FRST logs. Should I wait on the reply? If this is most likely a FP I don't mind waiting to hear back from the support team, but if you think this should be tackled right away, I will provide the further logs. I have quarantined the file but im not sure how to zip it. Thanks again for your support.

Thanks for moving it. I have attached the log file malwarebytes.txt

Thanks in advance for your help. I recently did a threat scan and Malwarebytes AI detected a file as malware that is related to screen connect. I just want to know if this is a false positive, as I have used screen connect for awhile. I can attach the text log I saved of the quarantine. I don't want to have anything identifiable on the forum so let me know the best way to attach the logs of the Malwarebytes scan. Thanks.

i have specific work software that might be using it. My software guys probably loaded it. I haven't personally added anything

I ran it three days ago because of the false report for the phishing website block. That was happening to a lot of people and was resolved with an update to MB

ok thx

not really??? 3 people had downloaded it already... i'm a bit concerned

this zip is safe to upload? No sensitive info from my pc?

I see the upload zip file. Should I attach it to this forum post? Is the information ok to post here?

i downloaded the support tool and gathered logs. Do i need to attach them to this forum post (how do I do that), or is the automatic upload at the end of the log gathering procedure enough?

Today when I turned on my computer I received a notification that one of my real time protection services was turned off. When I opened MB premium program it showed that all services were turned on. I tried shutting down my computer and turning it back on, but it didn't send me any notifications. I was just wondering if this was a random bug, or something I should look into further?

I checked for updates, and restarted my computer, and I'm still getting the warnings