FreeTelly is registering a false positive

[mathit]

FreeTelly is the latest preconfigured version of XBMC/Kodi, all of which are legitimate programs.  For info, see https://www.tvaddons.ag/freetelly-windows/

You fixed the Kodi false positives, hopefully you can fix this one too.

 

[1PW]

Hello mathit:

Please carefully read the locked and pinned topic in this sub-forum, How to report a False Positive and for developer analysis, kindly attach the 3 requested .zip archives to your next reply in this thread.

If an exclusion has not already been entered, a temporary exclusion entry might then be made available to prevent a re-occurrence for your individual system.

Thank you for beta testing MBARW and your feedback.

[mathit]

I can't attach a zipped version of FreeTelly.exe because MWBARW (beta) has put in a system area and prevents copying.   I have an admin account, so I'm not sure why. The installer for Windows is here: https://www.tvaddons.ag/freetelly-windows/

The two other zips are here:

 

Malwarebytes Anti-Ransomware.zip

logs.zip

[1PW]

Hello mathit:

If quarantined, please try to restore C:\Program Files (x86)\FreeTelly\FreeTelly.exe if possible.  Then zip and attach the archive file in a reply to this topic.

Thank you.

 

[mathit]

Here it is.

FreeTelly.zip

[mathit]

It flagged this one too:

Au_.zip

[1PW]

Hello mathit:

Although the MBARW Beta6 calculated hashes for the Au_.exe file seems to successfully match, that was not the case for FreeTelly.exe and under these conditions a MBARW Beta7 upgrade, utilizing a clean install procedure may be called for.

Rather than a simple re-install of MBARW Beta6, please consider a clean install of MBARW Beta7:

1. Close all open user applications followed by a conventional Windows based uninstall of Malwarebytes Anti-Ransomware through the Windows system Control Panel.
2. If MBARW Beta7 was uninstalled successfully, the following sub-directories will have been deleted from a typical Windows x64 system:

                         C:\Program Files\Malwarebytes\
                         C:\ProgramData\Malwarebytes Anti-Ransomware\
                         C:\ProgramData\MBAMService\

3. If any of the above directories remain, please delete them manually.  If necessary, any remaining/uninstalled directory must be deleted in the Windows Safe mode.
4. Execute a conventional Windows restart to the Normal Windows boot mode and log-in through an Administrator's account. <===IMPORTANT!
5. Using an Administrator's account only, download a fresh MBARW_Setup.exe file and save to the Administrator's Desktop from the Malwarebytes Anti-Ransomware BETA 7 Now Available topic.
6. Right-click the saved MBARW_Setup.exe file and left-click   Run as administrator from the context menu and continue.
7. Upon a successful installation, please restart the computer in a conventional manner to the Windows Normal boot mode.
8. Please make the following MBARW Beta7 exclusions:

C:\Users\Jane\AppData\Local\Temp\~nsuA.tmp\Au_.exe
C:\Program Files (x86)\FreeTelly\FreeTelly.exe

Please reply to your topic with the status of your reported issue.  Thank you for beta testing MBARW and your valued feedback.