biomembrain Posted May 29, 2020 ID:1384640 Share Posted May 29, 2020 I got a notification from Malwarebytes while running MobaXterm. The program is free, and you can download it to see. I got the notification while trying to run a new connection. Is this a false positive? Link to post Share on other sites More sharing options...
biomembrain Posted May 29, 2020 Author ID:1384641 Share Posted May 29, 2020 I don't know if it has been fixed already. It seems like it may have been a false positive. I figured this out yesterday. Link to post Share on other sites More sharing options...
Staff shadowwar Posted May 29, 2020 Staff ID:1384643 Share Posted May 29, 2020 please post a log showing the detection. Thanks. Link to post Share on other sites More sharing options...
biomembrain Posted May 30, 2020 Author ID:1384827 Share Posted May 30, 2020 Here's the log showing the detection. log_moba.txt Link to post Share on other sites More sharing options...
Staff shadowwar Posted May 31, 2020 Staff ID:1384895 Share Posted May 31, 2020 (edited) i installed from the website and i dont get that file in the install. Can you please zip and attach this file? C:\Users\admin\Documents\MobaXterm\slash\bin\busybox.exe or go to virustotal.com upload that file and let it scan then paste the link to the report here. Edited May 31, 2020 by shadowwar Link to post Share on other sites More sharing options...
biomembrain Posted May 31, 2020 Author ID:1384918 Share Posted May 31, 2020 I deleted it from Quarantine, the same day. However, I remember how it happened. I pressed the button, start a new connection, in the middle of the MobaXterm program. I only used the program a couple of times, and that's how it happened. Yea, I remember pressing that button, when it happened. Maybe restarting the computer, and relaunching the program does something... I am not sure. Other users reported the same issues with MobaXterm, and it's in this False Positive forum. I am not sure what others concluded. Thanks for your help @shadowwar. Have nice food, and nice drinks. You deserve the best. Thank you. ( ˘▽˘)っ tea, coffee, water, juice,. Link to post Share on other sites More sharing options...
biomembrain Posted May 31, 2020 Author ID:1384923 Share Posted May 31, 2020 On 5/28/2020 at 12:43 PM, emptyramenbx said: Hi y'all! I've been working with MobaXTerm with sometime. I use it to connect to my local media server. I was attempting to organize my files today in the middle of one of the scans, when I saw that Malwarebytes reported something "MXT" on Quarantine. I quarantined it and did not care. Currently performing a system-wide scan, but I remembered that MXT can be MobaXTerm. Guess I was right, because something called bin/bash was quarantined. Is this is a false positive? Just for some information: I do have some scripts on the server to facilitate the process of organizing files on the remote machine. If I execute a bash script on this machine, can the Malwarebytes scan be impacted? Thanks. This topic has the suspected files. Link to post Share on other sites More sharing options...
biomembrain Posted May 31, 2020 Author ID:1384925 Share Posted May 31, 2020 Post name: False Positive on MobaXTerm? Link to post Share on other sites More sharing options...
Staff shadowwar Posted May 31, 2020 Staff ID:1385074 Share Posted May 31, 2020 i really need the files to fix this as when i install it here i dont get those files. Link to post Share on other sites More sharing options...
biomembrain Posted June 1, 2020 Author ID:1385199 Share Posted June 1, 2020 I am going to try to get the same result, and get the file, that was in the file detection. Link to post Share on other sites More sharing options...
biomembrain Posted June 1, 2020 Author ID:1385204 Share Posted June 1, 2020 Okay, I deleted the 'first setup files' for MobaXTerm... and then I reinstalled it. So it's like a new fresh install. busybox.exe is in the MobaXterm folder, in the Documents directory. I double clicked busybox.exe, and Malwarebytes didn't detect anything. Yea, I installed the non-portable version of MobaXterm, the right download button. If you search busy in Windows Explorer while in: Documents --> MobaXTerm folder. You should be able to find this file. Link to post Share on other sites More sharing options...
biomembrain Posted June 1, 2020 Author ID:1385205 Share Posted June 1, 2020 I uploaded the file on Virustotal, and it didn't detect anything. Link to post Share on other sites More sharing options...
Staff shadowwar Posted June 1, 2020 Staff ID:1385262 Share Posted June 1, 2020 can you provide the virustotal link. Link to post Share on other sites More sharing options...
biomembrain Posted June 1, 2020 Author ID:1385319 Share Posted June 1, 2020 https://www.virustotal.com/gui/file/a6789392282fb826d68ab94d95153507ca503c5a6a1c300db7565073bcaef29e/detection Link to post Share on other sites More sharing options...
Staff shadowwar Posted June 4, 2020 Staff ID:1385877 Share Posted June 4, 2020 Confirmed this file was whitelisted on may 28th Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now