FP - Malware.Heuristic.1003, C:\PROGRAM FILES (X86)\FF\FF.EXE

[DCB1951]

The executable in this ZIP file (ff.exe) has been installed on my system for many years.  I believe that last night's scheduled scan mistakenly reported this file as infected with "Malware.Heuristic.1003".  Therefore, I suspect a false positive report.

Please advise.  Thanks in advance.

ff_20120803.zip

[TwinHeadedEagle]

Hi,

I couldn't reproduce this detection but it was definitely a false positive. Can you try to rescan?

[Porthos]

Rescan  clean for me.🙂

Edited April 26, 2021 by Porthos

[DCB1951]

7 minutes ago, TwinHeadedEagle said:

Hi,

I couldn't reproduce this detection but it was definitely a false positive. Can you try to rescan?

I just did, and it came up clean this time. 

Just so you don't think I was confused, here iss last night's report:

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 4/26/21
Scan Time: 2:00 AM
Log File: a59735a0-a654-11eb-81e9-84fdd1b81d3d.json

-Software Information-
Version: 4.3.0.98
Components Version: 1.0.1273
Update Package Version: 1.0.39803
License: Premium

-System Information-
OS: Windows 10 (Build 19042.928)
CPU: x64
File System: NTFS
User: System

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Scheduler
Result: Completed
Objects Scanned: 413974
Threats Detected: 1
Threats Quarantined: 0
Time Elapsed: 16 min, 44 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Warn
PUM: Warn

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 1
Malware.Heuristic.1003, C:\PROGRAM FILES (X86)\FF\FF.EXE, No Action By User, 1000001, 0, 1.0.39803, 0000000000000000000003EB, dds, 01218449, 33667CD13C46D3D4DA195437C0E00C1C, 22644605AFC67FA8201541508AD3E8E5A26F7E3296E4CFB356E3DF9A2D62777C

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

Here is the scan just taken at your direction:

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 4/26/21
Scan Time: 8:44 AM
Log File: 30680032-a68d-11eb-be65-84fdd1b81d3d.json

-Software Information-
Version: 4.3.0.98
Components Version: 1.0.1273
Update Package Version: 1.0.39813
License: Premium

-System Information-
OS: Windows 10 (Build 19042.928)
CPU: x64
File System: NTFS
User: LAPTOP-EEKPTLRJ\dborg

-Scan Summary-
Scan Type: Custom Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 1
Threats Detected: 0
Threats Quarantined: 0
Time Elapsed: 0 min, 14 sec

-Scan Options-
Memory: Disabled
Startup: Disabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 0
(No malicious items detected)

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

I guess the automated definition updates took care of it.

Thank you very much for your very prompt response!