a few FP as of now

[Gt-truth]

hi

Malwarebytes version 3 is just complete the scan and it shows so many FP’S . here the lists !

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 3/15/19
Scan Time: 9:29 AM
Log File: ae3481b1-46eb-11e9-b016-80ce62d7ac0e.json

-Software Information-
Version: 3.7.1.2839
Components Version: 1.0.562
Update Package Version: 1.0.9696
License: Trial

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Scheduler
Result: Completed
Objects Scanned: 286290
Threats Detected: 6
Threats Quarantined: 0
Time Elapsed: 2 hr, 10 min, 24 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 6
MachineLearning/Anomalous.97%, C:\USERS\\DOWNLOADS\BBFLBK5(1).EXE, No Action By User, [0], [392687],1.0.9696
MachineLearning/Anomalous.97%, C:\USERS\\DOWNLOADS\BBFLBK5(2).EXE, No Action By User, [0], [392687],1.0.9696
MachineLearning/Anomalous.97%, C:\USERS\\DOWNLOADS\BBFLBK5.EXE, No Action By User, [0], [392687],1.0.9696
MachineLearning/Anomalous.93%, C:\USERS\\DOWNLOADS\FAP-CEO-DL_WINDOWS_8_1_07.ZIP, No Action By User, [0], [392687],1.0.9696
MachineLearning/Anomalous.96%, C:\USERS\\DOWNLOADS\FAST-STARTUP-DISABLER-PORTABLE.ZIP, No Action By User, [0], [392687],1.0.9696
MachineLearning/Anomalous.100%, C:\USERS\\DOWNLOADS\W10PRIVACY.ZIP, No Action By User, [0], [392687],1.0.9696

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)

 

[TwinHeadedEagle]

Hi,

We will need those files or their MD5 or VirusTotal report. Thanks!

[Gt-truth]

Just now, TwinHeadedEagle said:

Hi,

We will need those files or their MD5 or VirusTotal report. Thanks!

OK , for bb flashback . the file size is a big so I can not to uploading them to Virus total or even to malwarebytes forum . but , I’m going to uploading the rest of the exe. files

[TwinHeadedEagle]

You can use HashMyFiles for bigger files.

https://www.nirsoft.net/utils/hash_my_files.html

 

[Gt-truth]

here are the VT links and the files in the attachment . thanks to you for the tool

https://www.virustotal.com/en/file/19c85e48817db721df681a2ce7f2a14973250d7f0a39fe1dc613735d075051c9/analysis/

https://www.virustotal.com/en/file/19c85e48817db721df681a2ce7f2a14973250d7f0a39fe1dc613735d075051c9/analysis/

https://www.virustotal.com/en/file/19c85e48817db721df681a2ce7f2a14973250d7f0a39fe1dc613735d075051c9/analysis/

fap-ceo-dl_Windows_8_1_07.zip fast-startup-disabler-portable.zip W10Privacy.zip

Edited March 15, 2019 by Gt-truth

[TwinHeadedEagle]

These files shouldn't be detected. Can you try a scan one more time?

[Gt-truth]

1 hour ago, TwinHeadedEagle said:

These files shouldn't be detected. Can you try a scan one more time?

I will preform a new scan and I will let you know the result when MB to complete the new scan .

Edited March 15, 2019 by Gt-truth

[miekiemoes]

Hi Gt-truth,

I see you are using the beta version. There's a bug related with above detections, which will be resolved in one of the next Component Updates.

So for anything that is still detected, please temporary ignore these and add an exclusion for it. Once the new component update is out, these won't be detected anymore.

Thanks!

[miekiemoes]

Hi,

This should be fixed now, as CU 1.0.563 has been released.

Thanks!

[Gt-truth]

Hi @miekiemoes

I have to wait after I saw your #8 reply to make sure that bug it will be fixed with the next beta version , and now I have this CU 1.0.563 and all files that I have are no longer being detected !

@TwinHeadedEagle all seems fixed now ! they are no longer a problems with those files which I have it .

 

thanks to both of you and a thanks for Malwarebytes team .