Jump to content

I am not sure that is a "false" positive (or negative)


algasys

Recommended Posts

Hello the Beta Team,

 

How are you? :P

 

MBAR tell me that I have a pest which is quarantined.

But, this stuff is NOT quarantined it still exist in the original folder.

 

Where is the quarantine? Just to look at.

 

In fact, this is TIWORKER.EXE from the folder winSxS.

 

As I can read on the net, this folder is very important (win 8.1). But I also read that Tiworker was, very often, the target of hackers.

Then, I don't know if have to report this entry as false positive. Or what to do with it: delete or not delete, that is the question. (fortunatly Shakespeare didn't have a computer).

 

So I hope to sleep this night thinking about you working :lol:

 

Regards

 

 

 

Link to post
Share on other sites

Hello and welcome:

 

You mention "MBAR", but I presume you refer to MBARW Beta?

(MBAR is Malwarebytes Anti-Rootkit Beta, while MBARW is the new Malwarebytes Anti-Ransomware Beta, a different application. ;) )

 

To assist the developers with your possible False Positive detection, please see here: How to report a False Positive.

Then, if possible, please post back here in this thread with the requested logs.

 

Thank you,

Link to post
Share on other sites

Hello Daledoc1,

 

This very kind of you to help me.

 

I of course was talking about MBARW beta

 

I remind that the "false positive or negative" is still in its original folder. Unless I looked bad, I did not find in the quarantine.

 

AS you asked here in attach the zip files.

 

I hope this will help

 

Best regards

 

 

TiWorker.zip

logs.zip

Malwarebytes Anti-Ransomware.zip

Link to post
Share on other sites

  • 2 weeks later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.