Portable Admin - False Positives

[DanKarbZ]

Hello, I am the developer of an admin utility called Portable Admin. 

This utility performs a lot of different administrative functions, so its no surprise that your AV software is flagging many components of it. 

 

Please whitelist all components of my application .. they are attached in the zip files "samples.zip" .. password is "infected"

samples.zip

[cli]

Hi, 

I see that some of the files are being detected by our MachineLearning engine. Are these files in development?

If so, from MachineLearning/Anomalous Detections and Explanation:

Quote

Also, If you are a developer, while building your application,  I suggest you exclude the working/building directory from detection via the exclusion settings in Malwarebytes. This since our Anomaly detection might possibly detect some of the files you are building.
Once the application/project is final and ready to be shared with others, in most cases it won't be detected anymore since it won't be triggered as "anomalous" anymore either.

In case a "final project" is still detected, please let us know (include the sample), so we can add it to our database of known good apps as well to prevent this in the future.

If not, let me know and I'll take care of it.

 

[DanKarbZ]

It is still being developed, but the detection does not occur on my development pc.. I do not use malware bytes or any antivirus. This is bein  detected on client PC's, while running the compiled project (final project). 

 

[cli]

Ok, this should be fixed in the next update. 

[DanKarbZ]

If I make small changes to the orginial code, will this affect detection? 

[DanKarbZ]

I made some changes to core functionality and now its being detected again. Same detection: anomalous/machine learning. 

I attached all my binaries again ... password is "infected" 

 

I don't run MalwareBytes on my developement machines, but beta versions of my program do make their way onto other computers that run MalwareBytes .. I think that's the reason for detection.

 

Can you please whitelist again??

newsamples.zip