False Positive

[TheFormTool]

Please confirm that this file is not carrying a Trojan virus or other malware. When I test it on a Windows machine, using MalwareBytes Premium 4.1.0 it passes with no issues, as this when I right-clicked the attached file and asked for a MawareBytes scan.

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 7/6/20
Scan Time: 4:21 PM
Log File: 5c86ea60-bfdf-11ea-8513-001c426139ef.json

-Software Information-
Version: 4.1.0.56
Components Version: 1.0.955
Update Package Version: 1.0.26511
License: Premium

-System Information-
OS: Windows 10 (Build 18362.900)
CPU: x64
File System: NTFS
User: TFTWINDOWS\RWC

-Scan Summary-
Scan Type: Custom Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 1
Threats Detected: 0
Threats Quarantined: 0
Time Elapsed: 0 min, 15 sec

-Scan Options-
Memory: Disabled
Startup: Disabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 0
(No malicious items detected)

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

BrokenAurora.zip

[cli]

I'm a bit confused. You report this as a false positive when it is not being detected by our scanner as you have shown in the log posted above.

Do you have reason to believe this is malicious? If so, we ask users to submit the executable to Virustotal and provide the Virustotal link and the executable (.exe) in a post in Newest Malware Threats. 

[Porthos]

1 hour ago, TheFormTool said:

Please confirm that this file is not carrying a Trojan virus or other malware. When I test it on a Windows machine, using MalwareBytes Premium 4.1.0 it passes with no issues, as this when I right-clicked the attached file and asked for a MawareBytes scan.

I believe you are actually referring to the website block you were/are receiving.

Malwarebytes does not scan/detect doc's during a scan. So it will not detect a infected document until it is executed with the paid protection.

Edited July 7, 2020 by Porthos