False Positivo?

[Serial]

Hello Team MalwareBytes

Installed the Savefrom.net helper extension in all browsers, Vivaldi, Opera, and Firefox to download Youtube videos and Facebook and had not been detected by malwarebytes no abnormalities at the time of installation.

When you restart Firefox browser extension has been removed to quarantine, as can be seen below:

Detection, 28/06/2016 23:50, XXXXX, DESKTOP-JTVQ5EM, Protection, Malware Protection, Archive, PUP.Optional.SaveFrom,C:\Users\Edson\AppData\Roaming\Mozilla\Firefox\Profiles\szbnlbt1.default-1465398675327\extensions\helper@savefrom.net.xpi, Quarantine [8acdfb072674270f0e96d2ee48bb12ee]

I wonder if it is a false positive because the other browsers are installed the extension and nothing was detected by MalwareBytes.

The extension is the official website of the Firefox browser as can be seen in this link: https://addons.mozilla.org/pt-BR/firefox/addon/savefromnet-helper/?src=ss

Using Windows 10 x64 version of malwarebytes 2.2.1.1043.

Sorry the language errors because the text was translated from Portuguese Brazil to English by Google Translate

I thank you for your attention

Serial

 

[miekiemoes]

Hi,

This looks like an FP indeed and will get fixed in next database update.

Thanks for reporting!

[Serial]

Hello miekiemoes 

Thanks for the quick return

Serial

[thisisu]

This was fixed in 2016.06.29.04 (available now). Please let me know if this is not the case for you.

[Serial]

hello thisisu

I restored the extension and returned to work normally.

If this extension will be blocked again let you know all.

Thanks for the feedback.

Serial.