Amazon Addon - False Positive

[StanGreen]

The software keeps saying the Amazon addon (File1 below) is malware, but it is not. This is the addon provided by Amazon.com to make online shopping easier.

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 2/25/18
Scan Time: 2:27 AM
Log File: 61a4e9be-19fd-11e8-a2b9-0021ccc016f5.json
Administrator: Yes

-Software Information-
Version: 3.3.1.2183
Components Version: 1.0.262
Update Package Version: 1.0.4088
License: Premium

-System Information-
OS: Windows 10 (Build 16299.248)
CPU: x64
File System: NTFS
User: System

-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 562313
Threats Detected: 1
Threats Quarantined: 0
(No malicious items detected)
Time Elapsed: 19 min, 44 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 1
PUP.Optional.Amazon1Button, C:\USERS\STAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\11VXNN04.DEFAULT\EXTENSIONS\ABB@AMAZON.COM.XPI, No Action By User, [837], [493346],1.0.4088

Physical Sector: 0
(No malicious items detected)

(end)

[Malwarebytes]

***This is an automated reply***

Hi,

Thanks for posting in the Malwarebytes 3 Help forum.

 

If you are having technical issues with our Windows product, please do the following: 

Spoiler

If you haven't done so already, please run these two tools and then attach the logs in your next reply:

NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

• Farbar Recovery Scan Tool (FRST)
  1. Download FRST and save it to your desktop
     Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit
  2. Double-click to run FRST and when the tool opens click "Yes" to the disclaimer
  3. Press the "Scan" button
  4. This will produce two files in the same location (directory) as FRST: FRST.txt and Addition.txt
     • Leave the log files in the current location, they will be automatically collected by mb-check once you complete the next set of instructions
• MB-Check
  1. Download MB-Check and save to your desktop
  2. Double-click to run MB-Check and within a few second the command window will open, press "Enter" to accept the EULA then click "OK" 
  3. This will produce one log file on your desktop: mb-check-results.zip
     • This file will include the FRST logs generated from the previous set of instructions
     • Attach this file to your forum post by clicking on the "Drag files here to attach, or choose files..." or simply drag the file to the attachment area

One of our experts will be able to assist you shortly.

 

If you are having licensing issues, please do the following: 

Spoiler

For any of these issues:

• Renewals
• Refunds (including double billing)
• Cancellations
• Update Billing Info
• Multiple Transactions
• Consumer Purchases
• Transaction Receipt

Please contact our support team at https://support.malwarebytes.com/community/consumer/pages/contact-us to get help

If you need help looking up your license details, please head here: https://support.malwarebytes.com/docs/DOC-1264 

 

Thanks in advance for your patience.

-The Malwarebytes Forum Team

[exile360]

Greetings

The item is being deliberately detected as PUP (Potentially Unwanted Program) and while I do not know the exact reason it is classified that way, I suspect it has to do with its nature as potential adware or something along those lines.

Since you installed it deliberately and wish to keep it, simply perform another scan and uncheck the box next to the detection on the left and click Next.  Once the prompt is displayed asking how you wish to handle the unchecked item, click on Ignore Always and the item will be added to Malwarebytes' exclusions so that it is no longer detected in future scans.