zalkar_s Posted November 23, 2020 ID:1422877 Share Posted November 23, 2020 Looks like it is False Positive?Signature: Trojan.Downloader C:\PROGRAMDATA\MICROSOFT\VISUALSTUDIO\PACKAGES\MICROSOFT.VISUALSTUDIO.TESTTOOLS.TESTPLATFORM.V2.CLI,VERSION=16.6.0.2020041401\PAYLOAD.VSIX Can you provide information about this file verdict? Link to post Share on other sites More sharing options...
Staff cli Posted November 23, 2020 Staff ID:1422882 Share Posted November 23, 2020 Can you provide the file and scan log? Thanks. Link to post Share on other sites More sharing options...
zalkar_s Posted November 23, 2020 Author ID:1422885 Share Posted November 23, 2020 2 minutes ago, cli said: Can you provide the file and scan log? Thanks. File is quarantined and deleted. This is all what I have. Is there chance to test it by downloading package VS package? Version is provided Many thanks! Link to post Share on other sites More sharing options...
Staff cli Posted November 23, 2020 Staff ID:1422888 Share Posted November 23, 2020 I don't have Visual Studio, but we maybe able to get the information I need via logs. Can you follow the directions posted in Upload Malwarebytes Support Tool logs offline and attach the logs here? Thanks. Link to post Share on other sites More sharing options...
thegame Posted November 26, 2020 ID:1423547 Share Posted November 26, 2020 same issue. luckily, I've found this thread before quarantine my file. here is PAYLOAD.VSIX and scan logs.mb_log.txt payload.zip Link to post Share on other sites More sharing options...
Staff cli Posted November 29, 2020 Staff ID:1424123 Share Posted November 29, 2020 @thegameThanks for the attachments, you will see yours fixed in the next update. Link to post Share on other sites More sharing options...
brungardtdb Posted December 1, 2020 ID:1424575 Share Posted December 1, 2020 I think I have a similar false positive. Same file extension but I'm not sure it's the same file, it appears to be from a different Visual Studio folder. I have attached my log .txt file and the PAYLOAD.VSIX file. MWB_False_Positive.zip Link to post Share on other sites More sharing options...
MSAU Posted December 2, 2020 ID:1424586 Share Posted December 2, 2020 Just signed up to report I have the same issue. Link to post Share on other sites More sharing options...
Staff cli Posted December 2, 2020 Staff ID:1424614 Share Posted December 2, 2020 Thanks for reporting, this has been fixed. Please update. Link to post Share on other sites More sharing options...
ScanIAm Posted February 10, 2022 ID:1501715 Share Posted February 10, 2022 These two showed up this morning: File: 2 Trojan.Crypt, C:\PROGRAMDATA\MICROSOFT\VISUALSTUDIO\PACKAGES\MICROSOFT.VISUALSTUDIO.INTELLICODE,VERSION=2.2.1462.13379\PAYLOAD.VSIX, No Action By User, 506, 1024595, 1.0.50931, , ame, , 57A328DDEA180038CE1B9AD4974CF413, 6CB7B22029D99AFFF11B217365924C96E9A13C6DEF4682ACDE86EBEE2548BD8B Trojan.Crypt, C:\PROGRAMDATA\MICROSOFT\VISUALSTUDIO\PACKAGES\MICROSOFT.VISUALSTUDIO.WEBTOOLSEXTENSIONS,VERSION=16.11.94.52318\PAYLOAD.VSIX, No Action By User, 506, 1024595, 1.0.50931, , ame, , 5B426BA9E27597E2A80B46F7D51157E7, B524A64A3F3311C7BA73B0F6EDA59663323239C4A6D581C5895E47CFE04D4945 Link to post Share on other sites More sharing options...
Porthos Posted February 10, 2022 ID:1501717 Share Posted February 10, 2022 Just now, ScanIAm said: These two showed up this morning: This FP has been fixed in database version 1.0.50933 and newer on MB4. Link to post Share on other sites More sharing options...
ScanIAm Posted February 10, 2022 ID:1501718 Share Posted February 10, 2022 Excellent, thanks! Link to post Share on other sites More sharing options...
Porthos Posted February 10, 2022 ID:1501719 Share Posted February 10, 2022 2 minutes ago, ScanIAm said: These two showed up this morning: Also next time, start a new topic. Link to post Share on other sites More sharing options...
ScanIAm Posted February 10, 2022 ID:1501720 Share Posted February 10, 2022 Sure. This was a direct match to my google query, so I didn't go further. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now