nymphelav Posted March 14, 2021 ID:1444589 Share Posted March 14, 2021 Hello, I was playing a game and out of the blue, I got an alert from MB that the scan was completed (daily scan I guess) and that 1 threat was detected in C:\USERS\username\APPDATA\LOCAL\TEMP\MBSETUP_OFFLINE.EXE and that it is Malware-AI https://blog.malwarebytes.com/detections/malware-ai/ Never had something like this pop up. How did this end up in my PC? Shouldn't the MB block this at the time of download? I didn't download anything recently. Could this be a false positive? I attached the report in case it helps. Thanks! report.txt Link to post Share on other sites More sharing options...
Porthos Posted March 14, 2021 ID:1444591 Share Posted March 14, 2021 7 minutes ago, nymphelav said: attached the report in case it helps. Good chance it is a FP due to the AI classification. This post will be moved to the correct section. Please zip the following file here please. C:\USERS\username\APPDATA\LOCAL\TEMP\MBSETUP_OFFLINE.EXE Link to post Share on other sites More sharing options...
nymphelav Posted March 14, 2021 Author ID:1444644 Share Posted March 14, 2021 Hello and thank you for the reply. Unfortunately I do not have the file anymore. I deleted it via MalwareBytes... I was more curious about where this file came from? Is this from Malwarebytes , could be an update, since it has MBSETUP name? Maybe the file was in my PC for a while and only now just detected. Link to post Share on other sites More sharing options...
Staff shadowwar Posted March 14, 2021 Staff ID:1444657 Share Posted March 14, 2021 I would need the file to see why this happened. You can restore from quarantine the file and then zip and attach here. Link to post Share on other sites More sharing options...
nymphelav Posted March 14, 2021 Author ID:1444663 Share Posted March 14, 2021 33 minutes ago, shadowwar said: I would need the file to see why this happened. You can restore from quarantine the file and then zip and attach here. The problem is I quarantined the file and then I deleted it from the quarantine list. So it's not in my computer anymore I guess... Link to post Share on other sites More sharing options...
Staff shadowwar Posted March 14, 2021 Staff ID:1444664 Share Posted March 14, 2021 No it wouldnt be. Quarantine is totally safe. Its recommend you leave stuff in quarantine at least a couple of weeks do to a false positive situation or the like. The files are totally disabled in quarantine and cant possibly run. Link to post Share on other sites More sharing options...
nymphelav Posted March 14, 2021 Author ID:1444665 Share Posted March 14, 2021 8 minutes ago, shadowwar said: No it wouldnt be. Quarantine is totally safe. Its recommend you leave stuff in quarantine at least a couple of weeks do to a false positive situation or the like. The files are totally disabled in quarantine and cant possibly run. Will keep that in mind for the future. Thanks for the help! Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now