FALSE POSITIVE

[seven_eleven]

THERE IS NO NAME OF THE SOFTWARE INDEED,

I DID IT ON MY OWN, I'VE READ SOME INSTRUCTIONS AND HERE YOU ARE

IT IS ABOUT 2 COUPLE OF 3 SAFE FILES EACH

TO LIST OR PRINT THE FOLDERS

BY THE RIGHT CLICK OF THE MOUSE

LIST (MAKING OF THE 3 FILES)

1ST FILE, OPEN NOTEPAD,

SAVE IT AS ACTIVATE_LIST.BAT

WRITE IN IT:

copy LIST.cmd C:\

START LIST.reg

2ND FILE, OPEN NOTEPAD,

SAVE IT AS LIST.CMD

WRITE IN IT:

@echo off

dir %1 /s /O:GN > %temp%\dir.txt

start /w notepad.exe %temp%\dir.txt

del %temp%\dir.txt

3RD FILE, OPEN NOTEPAD,

SAVE IT AS LIST.REG

WRITE IN IT:

REGEDIT4

[HKEY_CLASSES_ROOT\Folder\shell\LIST\command]

@="c:\\LIST.cmd \"%1\""

PRINT (MAKING OF THE 3 FILES)

1ST FILE, OPEN NOTEPAD,

SAVE IT AS ACTIVATE_PRINT.BAT

WRITE IN IT:

copy PRINT.cmd C:\

START PRINT.reg

2ND FILE, OPEN NOTEPAD,

SAVE IT AS PRINT.CMD

WRITE IN IT:

@echo off

dir %1 /s /O:GN > %temp%\dir.txt

start /w notepad.exe /P %temp%\dir.txt

del %temp%\dir.txt

3RD FILE, OPEN NOTEPAD,

SAVE IT AS PRINT.REG

WRITE IN IT:

REGEDIT4

[HKEY_CLASSES_ROOT\Folder\shell\PRINT\command]

@="c:\\PRINT.cmd \"%1\""

I SUPPOSE THAT THE CHARACTERS HAVE CAUSED AN ALERT IN MBAM,

JUST AS THE "EICAR" TEST, I DARE SAY

IT IS NO DANGEROUS INDEED BUT SOMETIMES THE CHARACTERS LOOK LIKE ENOUGH THREAT

CIAO

[Tigger93]

It looks like MBAM is detecting Broken.Command (or something like that)? If that is the case, then this is not a false positive, you just set it to something that isn't the default, which is why MBAM is detecting it. Just add it to ignore and it will no longer detect it.

[seven_eleven]

Your reply is quite satisfactory

now I can understand better how the software works

thank you