BobW57
-
Posts
3 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Posts posted by BobW57
-
-
This is free commercial software available from ExpresssPCB.com. I've been running it without issue for months. Suddenly today for the first time it is being incorrectly flagged as Malware. I think this is probably wrong.
Log excerpt:
Malware.AI.3731613183, C:\USERS\myWindowsID\APPDATA\LOCAL\DOWNLOADED INSTALLATIONS\{85AA7C91-283B-4221-86FB-0905887F9526}\EXPRESSPCBPLUS 3.1.1.0.MSI, No Action By User, 1000000, -563354113, 1.0.70421, 27A7AF7809C51DDCDE6BE5FF, dds, 02327524, 95F2C529C31002EEC785EC0A58801AFA, FF7021AD46F84F99E776FB4112D729FFF0E7AA1CA3840CCEC404A8FBE4946F49
Malware.AI.3731613183, C:\USERS\myWindowsID\APPDATA\LOCAL\DOWNLOADED INSTALLATIONS\{169580D7-43F8-46DE-A99C-9FCA29C39B46}\EXPRESSPCBPLUS 3.0.3.0.MSI, No Action By User, 1000000, -563354113, 1.0.70421, 27A7AF7809C51DDCDE6BE5FF, dds, 02327524, AE98CDC571FF1F5DA91E2F30404989BD, 0FDBC6C29B6D5EAB332FE9CCC1C28F9063F7E3161DA027C18DDBA630F6B87582
Malware.AI.3731613183, C:\PROGRAM FILES (X86)\EXPRESSPCBPLUS\EXPRESSPCBORDER.EXE, No Action By User, 1000000, -563354113, 1.0.70421, 27A7AF7809C51DDCDE6BE5FF, dds, 02327524, 0E89D8548FBBF0AB7487F3552010A248, B92C82D1397443EC012548BCCC9FE3E0FA8D7D6A7EE203FA59833AFDF8C4ACE4
-
Was trying to access my page hxxps://www.kkn.net/~n6tv/Y-BOX from Chrome browser, but suddenly receiving this "Trojan" report, and get it for all pages on the kkn.net domain. Why? VirusTotal.com reports it is clean.
What is the file that MalwareBytes thinks is a Trojan? I know the superusers of this private server and can get any file removed if needed. But I think it may be a false positive.
Probably False Positive Malware.AI.3731613183 on ExpressPCBOrder.exe
in File Detections
Posted
Thank you for the prompt reply. I will let you know if it happens again.