False Positive

[JimDrew]

I have been using Malwarebytes since it was beta.  Just recently, Malwarebytes has started identifying all of our software as MachineLearning/Anomalous.100%.  Our software is written in VB6 and contains numerous resources that include compressed firmware update images, image files, etc.  Can you please stop identifying our software as bad... unless of course there is some issue with the file being generated by the VB6 compiler!  A complete system scan was done with Malwarebytes and Windows Defender with no threats detected on the computer that is used to generate the compiled files.

Attached is an example.

Thanks!

 

 

update18.zip

[shadowwar]

One tip to totally avoid this would be to sign your files. We are also adding other safe measures soon to avoid some fp's. I will add this to the whitelist. IF others are still detected please send me the those samples and i can add them. This should be fixed next update.

 

[JimDrew]

We have a bunch of files - dozens when you consider different revisions of firmware.  How do you "sign" files?

 

[shadowwar]

This more or less explains it.

https://www.digicert.com/code-signing/signcode-signtool-command-line.htm

I did add some whites for the files. Can you let me know if any are still hit?

 

[JimDrew]

So far, so good!  Your whites have fixed the latest updaters so they can be copied and executed.