Jump to content

Company software


Igal

Recommended Posts

Hi.

 

We just released a new version of our internal software. It helps us with uploading computer settings to our CMS and is able to make some changes to computer settings. These files are downloaded from our website (cms.isstek.com) and contain personal API keys for every user, so the executioner is a bit different for every user. Right now we have MWB cloud and it is blocking our software with the following message:

MachineLearning/Anomalous.94%

Can you add it to the white list, please? 

Virustotal link:

https://www.virustotal.com/gui/file-analysis/MzM1ZjQxMjAyNWFhZTdkZTU0OTU1OTQ1YTcwODlhYjk6MTU2MDg4OTEwNA==/detection

Also attaching the executioner itself and the github link:

https://github.com/isstek/cms_api_use

 

CMS_interaction.zip

Link to post
Share on other sites

Hi,

This is detected by our MachineLearning engine, which helps to protect even better against 0day threats. Unfortunately, as this is a heuristic engine, it's possible False Positives happen. Thanks for reporting these, as this helps to finetune the engine, so these won't be detected in the future anymore.

This should be fixed by now. Please give it some time (max 10 minutes) in order to have it populate, so detection won't happen anymore.

If still detected on your end after ~10 minutes from now. Perform the following steps: 

  1. Totally exit/shutdown Malwarebytes.
  2. Go to here in explorer: C:\ProgramData\Malwarebytes\MBAMService
  3. Delete the following file only: hubblecache
  4. Then you can restart MBAM and the cache file will rebuild on the next scan.
Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.