CubeItMod605 3d Printer post-processor application false positive

[ZoeDiMercurio]

Hello,

We are using cloud based malwarebytes in our enterprise environment and recently deployed it to all our workstations. One user is reporting that a previously functional post-processor that they use with their 3d Printer is being blocked. We were able to unblock it for this user with a file-based exception, but would like the file evaluated as a false positive. Here is the virustotal information and an attached copy of the file

https://www.virustotal.com/gui/file/f7da8c2ecd15c2f510df1c309685cd049055c38b0fa6f5fa722c979e68a08dae/detection

Thank you!

CubeItMod605.7z

[cli]

Thanks for reporting, this will be fixed in 10 minutes.

[ZoeDiMercurio]

Hello,

It appears this file is still being quarantined as a false positive when detected.

[cli]

Please do the following to clear your hubble cache:

1. Click on the Malwarebytes icon in the system tray
2. Select "Quit Malwarebytes"
3. Navigate to %PROGRAMDATA%\Malwarebytes\MBAMService
4. Delete the file HubbleCache
5. Open Malwarebytes

 

[ZoeDiMercurio]

Hi cli,

If i'm using the enterprise managed version of Malwarebytes that does not include a quit option in the tray icon is there another way I could accomplish this? Or should I manually end the process?

[cli]

Can you update and scan the file again? 

[ZoeDiMercurio]

From the console I ran updates on the machine I am testing on (Check for Protection Updates, Check for Software Updates and Install Software Updates) and all of these completed successfully but the file is still being flagged and removed. Is there another update method I need to try?

[ZoeDiMercurio]

Hello,

Are there instructions available for how to get this working with an enterprise deployment of MalwareBytes? This file is still getting blocked on our systems unless we use an exception.

[Porthos]

3 minutes ago, ZoeDiMercurio said:

Hello,

Are there instructions available for how to get this working with an enterprise deployment of MalwareBytes? This file is still getting blocked on our systems unless we use an exception.

Not knowing which business version you are using, There are many support documents here.