False Positive on quill-webcomponents.exe

[QuillCS]

Hi 

We've got a false positive on a self extracting zip file that is part of our software's VSTO addin that enables multiple copies of the host office application to not be spawned. 

Link to as the compression is 90mb and file size limit is 87.89mb - https://storage.googleapis.com/quill-downloads-public-test/desktop-cef/quill-webcomponents.exe

Log files attached. 
log.txtlog1.txt

If you need any further info please let me know . 

Thanks 

[Porthos]

Quote

OS: Windows 10 Server

I am sorry to inform you that Malwarebytes Premium (stand alone) is not supported on any server OS and is also against the EULA as well.

 

  Quote

(b) Paid License.

If you purchased a license to the Software from Malwarebytes or from a Malwarebytes authorized reseller, then conditioned upon your compliance with the terms and conditions of this Agreement, Malwarebytes grants you a non-exclusive and non-transferable license to Execute the number of copies of the Software for which you have paid solely in executable form on the corresponding number of Devices owned or used by you. Furthermore, you may not Execute the Software on any Device(s) running a server operating system unless it is a Malwarebytes server product as reflected in its official product name and official release notes. You agree that your purchases are not contingent on the delivery of any future functionality or features (including future availability of any Software beyond the current license term or any new releases), or dependent on any oral or written public comments made by Malwarebytes regarding future functionality or features.

https://www.malwarebytes.com/eula/

The proper version is this. https://www.malwarebytes.com/business/ep-server-security/

 

System requirements

https://support.malwarebytes.com/hc/en-us/articles/360038984713-System-requirements-for-Malwarebytes-for-Windows-v4

[QuillCS]

Hi Apologies for that. That was just a temporary VM (which has since been destroyed) to provide you with Log files for evidence of the false positive. We have experienced this on some of our users machines but its obviously quite difficult to grab the log file from the clients machine. 

If you need any further information please let me know. 

Thanks 

[Porthos]

Could you do the following on one of the affected machines.

 

[QuillCS]

Hi 

Had a look at this and the protection is set to its defaults. But still flagging the false positive. Please advise. 


 




 

[Porthos]

1 hour ago, QuillCS said:

Had a look at this and the protection is set to its defaults. But still flagging the false positive. Please advise. 

Whether or not the settings look default, Did you click restore defaults or not please?

There is an issue where it "looks" right but is not.

[QuillCS]

Hi , Yep just tried it again to double check. 

And its still blocked it. 

[Porthos]

@Arthi could you look into this please.

Edited January 12, 2021 by Porthos

[QuillCS]

Any update on this ? 

Many Thanks