Jump to content

False Positive on exe file just compiled


ADM71

Recommended Posts

Hi

I work for a small developer and one of our executables is being identified by a Malwarebytes scan as containing a MachineLearning/Anomalous.95% infection.  The executable is part of the installation routine for our software.

Is there anyway to identify if this is a genuine infection of a false positive?

Thanks

Alan

Link to post
Share on other sites

  • Staff

Hi,

This is detected by our MachineLearning engine, which helps to protect even better against 0day threats. Unfortunately, as this is a heuristic engine, it's possible False Positives happen. Also see here for more explanation:


Can you zip and attach the exact file that was detected? This so we can add it to our engine for learning as goodware as well. 

Note, only staff can download attachements from this part of the forum (and yourself)

Thanks!

Link to post
Share on other sites

  • Staff

Thanks, this should be fixed now and no longer detected.

In case it's still detected, Quit malwarebytes from the systemtray.
Then navigate to the following folder:

C:\ProgramData\Malwarebytes\MBAMService

In there, locate the file HubbleCache and delete it.

Restart Malwarebytes again. A new Hubblecache will then be created again, so it will properly pick it up and remember to not detect this anymore.

Additional note, while developing this file and before releasing for the public, I also suggest you create an exclusion for the folder where your project is located, as our machinelearning engine *might trigger again (because of "partial" files).

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.