Jump to content

Search the Community

Showing results for tags 'false positive'.



More search options

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • Announcements
    • Malwarebytes News
    • Beta Testing Program
  • Malware Removal Help
    • Windows Malware Removal Help & Support
    • Mac Malware Removal Help & Support
    • Mobile Malware Removal Help & Support
    • Malware Removal Self-Help Guides
  • Malwarebytes for Home Support
    • Malwarebytes for Windows Support Forum
    • Malwarebytes for Mac Support Forum
    • Malwarebytes for Android Support Forum
    • Malwarebytes for iOS Support
    • Malwarebytes Browser Guard
    • False Positives
    • Comments and Suggestions
  • Malwarebytes for Business Support
    • Malwarebytes Endpoint Protection
    • Malwarebytes Incident Response (includes Breach Remediation)
    • Malwarebytes Endpoint Security
    • Malwarebytes Business Products Comments and Suggestions
  • Malwarebytes Tools and Other Products
    • Malwarebytes AdwCleaner
    • Malwarebytes Junkware Removal Tool Support
    • Malwarebytes Anti-Rootkit BETA Support
    • Malwarebytes Techbench USB (Legacy)
    • Malwarebytes Secure Backup discontinued
    • Other Tools
    • Malwarebytes Tools Comments and Suggestions
  • General Computer Help and Security Updates
    • BSOD, Crashes, Kernel Debugging
    • General Windows PC Help
  • Research Center
    • Newest Rogue-Ransomware Threats
    • Newest Malware Threats
    • Newest Mobile Threats
    • Newest IP or URL Threats
    • Newest Mac Threats
    • Report Scam Phone Numbers
  • General
    • General Chat
    • Forums Announcements & Feedback

Find results in...

Find results that contain...


Date Created

  • Start

    End


Last Updated

  • Start

    End


Filter by number of...

Joined

  • Start

    End


Group


AIM


MSN


Website URL


ICQ


Yahoo


Jabber


Location


Interests

Found 120 results

  1. Dear Malwarebytes team, We've cleaned the webiste hxxp://newasiangarden.se Can you please review and delist this one? Thank you!
  2. Please white-list the immunizations from SpyBot Search & Destroy. AdwCleaner[S0].txt AdwCleaner[C0].txt
  3. Greetings, I think this is a false positive, as I've never seen any sort of phishing activity on the PQ website. Just a silly game to play. You can see more info by pulling up Progress Quest on Wikipedia as well. Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 8/27/18 Protection Event Time: 4:26 PM Log File: ab7bb2aa-aa50-11e8-8042-005056c00001.json -Software Information- Version: 3.5.1.2522 Components Version: 1.0.421 Update Package Version: 1.0.6529 License: Premium -System Information- OS: Windows 10 (Build 17134.228) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , , Blocked, [-1], [-1],0.0.0 -Website Data- Category: Phishing Domain: progressquest.com IP Address: 173.230.140.86 Port: [65402] Type: Outbound File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (end) Best, Zzyzx
  4. Dear Malwarebytes team, We've cleaned the website http://www.queenofpeacedelray.org/ Can you please review and delist this one? Thank you!
  5. Hello there! I represent the https://www.myassays.com/ development team. We received several complaints from our customers that Malwarebytes Pro is blocking MyAssays.Desktop.Analysis.exe. So I used your trial version to explore this. Triggering does not occur when scanning. Detection happens by accident upon working with the application. There are no exact steps. I tried doing the same thing many times after reinstalling the MyAssays Desktop application, but Malwarebytes does not block the app again. I attach log files of my detection (detection log + json). Hope they will help you. Best regards, MyAssays Team. RansomwareBlocked.zip
  6. Hello Malwarebytes Team, I just downloaded a game off steam called Atex Brawl. Every time I try and run the game, Malewarebytes detects and quarantines a file, calling it MachineLearning/Anomalous.97% I've tried restoring the files myself and restarting my computer, but malwarebytes still quarantines the file. Thanks Atex Brawl Machine Learning.txt MBAMSERVICE.LOG
  7. Hello, This morning, likely false positive.on the digitalcoding.com domain website I use it 30 to 100 times a day for at least 10 years. Thank you for analyzing and above all, to tell me what, why and how it happened. Regards, Pierre (aka Terdef)
  8. I'm accustomed to report phishing URLs to ESET, Google, Netcraft, Microsoft, HPhosts forum and phishtank. Malwarebytes for Chrome blocks hxxp://phishing.eset.com/report/ita (safe to visit). I attached a screenshot. It is a false positive detection. Please fix it. Cheers
  9. Dear Malwarebytes team, We've cleaned the website http://orangereel.co.uk Can you please review and delist this one?
  10. A very old program for calibrating monitors that showed up as FP in this forum in 2008: https://forums.malwarebytes.com/topic/5968-roguesecureexpertcleaner/. Obtained yesterday from Samsung site (and passed VirusTotal inspection) at https://www.samsung.com/us/consumer/learningresources/monitor/naturalcolorexpert/pop_download.html. Please advise. Thanks! rogue.txt NCPro_2.0.0.0.zip
  11. Hi, My website was compromised 10days before so I put down my website ( www.indiautlityservices.com) and change the server. Currently I am working on a fresh look of my website but still your software is showing False positive. Can you please unblock my website ( www.indiautlityservices.com) from your list? Regards Raju website- www.indiautlityservices.com
  12. Dear Malwarebytes team, We've cleaned the website https://unsignedonly.com - can you please review and delist this one? Thank you!
  13. Greetings, For some reason, the news site, Salon.com is blocked, and I'm not sure why, since it's a legitimate news site. You can see more info about it on Wikipedia: hxxps://en.wikipedia.org/wiki/Salon_(website) Here is the protection log: Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 6/18/18 Protection Event Time: 2:01 PM Log File: cc50677a-733a-11e8-99a1-005056c00001.json Administrator: Yes -Software Information- Version: 3.5.1.2522 Components Version: 1.0.374 Update Package Version: 1.0.5530 License: Premium -System Information- OS: Windows 10 (Build 17134.112) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , , Blocked, [-1], [-1],0.0.0 -Website Data- Category: RiskWare Domain: www.salon.com IP Address: 151.101.1.167 Port: [61616] Type: Outbound File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (end) Best, Zzyzx
  14. MBAM detects The Long Dark's executable with the latest update and quarantines it. The Long Dark was just updated today, 06/14/2018. Hybrid Analysis TLD_False_Pos.zip
  15. Hi, I work for an link shortening service called Geniuslink (hxxps://www.geni.us) which provides our clients with the ability to create shortened links that automatically send their customers to the best destination to purchase their products or view their content. Several of our clients have recently reached out to us indicating that their links and our site are being blocked by Malwarebytes due to Riskware. Our site is only used to shorten and add custom rules to links, and we strictly monitor the links that are built to ensure that no one is using the service to create spam links. In the case that we do detect a malicious link or one is reported to us, we ensure that the link is taken down and the account terminated within 24 hours. Last year we reached out about a similar issue, and were told that we were previously unblocked as of the 16th of January, 2017. Is there any way we can get our Geniuslink domain (geni.us) removed from this Blacklist, and potentially Whitelisted with your service? We really don't want our customers to think that there's anything to be concerned about while using our service, so any help here would be most appreciated. Attached is the protection log from our repro of issue when it was reported by a client this morning - Let us know if there's any additional information we should provide in order to expedite this request. Thanks! -- Matt Mustarde Master of Client Success Geniuslink geni.usProtectionLog.txt
  16. Site is clean. Please review vegecravings.com for blacklist removal
  17. After installing the HamApps_JTAlert_2.11.2_Setup.exe, running the program results in an automatic quarantine of the exe, which my Malwarebytes Premium v3.4.5 shows as a file named "MachineLearning/Anomalous.100%". This also occurs on the previous version v 2.11.1. However, previous to that, v2.10.17 runs fine, has run fine since April 2017, and reverting to that shows no malware. The JTAlert file is located at https://HamApps.com , and is a reputable site as well as author. Their previous files have been fault free, and they pay great attention to virus/malware issues. To quote them: Since JTAlert was released in 2011, there have never been any documented virus/malware/trojan infections caused by JTAlert. Prior to making a new JTAlert release publicly available, all JTAlert files and the Installer are submitted to the VirusTotal Online Scanner where scans from over 60 commercial scanners are performed. I would like to see if your organization feels this is a false positive. Thank you in advance. Regards, Mike
  18. Dear Malwarebytes team, We've cleaned the website http://mindmastery4wealth.com Can you please review and delist this one? Thank you!
  19. Malwarebytes recently found something called PUP.Optional.Simplitec and has quarantined it. Before removing it, I was wondering if anyone knew exactly what it was? It was found in the program files of MAGIX Music Maker 80's Edition which makes me wonder if it's part of that programs files, and so I'm hesistant to delete it. I've attached an image showing the exact file path and item that was quarantined.
  20. I am running adwcleaner 7.1.1 and it is reporting my geneweb v 7 gwd.exe files as a trojan and quarantining them. Geneweb is a french geanealogy site which publishes a source application for local creation of geneanet formatted genealogy files. I don't know why they should show up as a trojan, and I expect that it may be a false positive, unless something has hidden in their coding. Geneaweb.7z
  21. Hello! I was doing a scan on my desktop an hour ago and noticed that I had two detections in my steam library, one in 'Darkwood_Data' managed folder and the other in 'Kingdom New Lands_Data' folder, both flagging a file named 'DOTween.dll' being flagged as 'Spyware.PasswordStealer'. Curiously, because I had the game on my laptop and because it feels like an unusual place to find Spyware in a game's data folders, I scanned the folder for Darkwood on my laptop and sure enough, it got flagged too. Is this a false positive or is this actual spyware? I've attached the exported report file for my laptop's detection and a screenshot of where MB found the file for convenience; I will try to get a copy of the report from my desktop as well. Thanks! PossibleFP (laptop).txt
  22. Hello, We have a false positive issue. Our company provides associations and ngos a management / communication platform. It automatically generates their websites. Some users reported that malwarbyte blocks our websites. For info it is hosted by ovh in France. One Example (many other from other subdomains): Category: PhishingDomain: lions-leplessisrobinson.myassoc.orgIP Address: 213.186.33.40Port: [60972]Type: OutboundFile: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Thank you in advance for your help. Cyril Bouaziz MyAssoc.org capture.docx
  23. I think this is a false positive (but would like to know either way): The file is the installer downloaded from the link at:https://www.vim.org/download.php#pc , which links to ftp://ftp.vim.org/pub/vim/pc/gvim81.exe as the default installer for MS-Windows. The offending file and log are attached. Thanks for your attention. gvim81.zip GVIM_false_pos.txt
  24. Can you remove our website from being blocked by malwarebytes? It does not have malware... Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 5/21/18 Protection Event Time: 9:35 AM Log File: 09539282-5d15-11e8-b5ac-4ccc6a27e676.json Administrator: Yes -Software Information- Version: 3.4.5.2467 Components Version: 1.0.342 Update Package Version: 1.0.5192 License: Premium -System Information- OS: Windows 10 (Build 17134.48) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , , Blocked, [-1], [-1],0.0.0 -Website Data- Category: Malware Domain: avwebdesigns.com IP Address: 160.153.62.168 Port: [53321] Type: Outbound File: C:\Program Files (x86)\Firefox Developer Edition\firefox.exe (end)
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.