Possible FP - BBCSO (VST) (Malware.Heuristic.1001)

[theMalt]

Hello,

 

I have just updated Malwarebytes (Free, ver. 4.3.0.98), and recently it just detected my file as Malware.Heuristic.1001. I have scanned this with Windows Defender, and have submitted a sample to VirusTotal, both showing no detections. Although I'm fairly sure that this is a false positive, I can't be really sure until it is confirmed.

 

The log for the recent scan is shown below. Additionally, the original report log file and the detected file is attached below.

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 4/29/21
Scan Time: 8:02 PM
Log File: b8aa7d4c-a8e2-11eb-8e57-6c2b5941ede7.json

-Software Information-
Version: 4.3.0.98
Components Version: 1.0.1273
Update Package Version: 1.0.39943
License: Free

-System Information-
OS: Windows 10 (Build 19042.928)
CPU: x64
File System: NTFS
User: DESKTOP-31HIQHI\Van

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 352618
Threats Detected: 1
Threats Quarantined: 0
Time Elapsed: 31 min, 13 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 1
Malware.Heuristic.1001, C:\PROGRAM FILES (X86)\VSTPLUGINS\BBC SYMPHONY ORCHESTRA (32 BIT).DLL, No Action By User, 1000001, 0, 1.0.39943, 0000000000000000000003E9, dds, 01223125, 68913440CB7A256E157341298C3D2070, D89C299EBB9A293209A0A03C076001828F580FF5012E92BBA9A850029D8931CC

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

 

Many thanks for your help. I'll be looking forward to the result.

 

TheMalt

possiblefpreport.txt possiblefpreport.zip

[miekiemoes]

Hi,

This is indeed a false positive by our additional machinelearning engine we have implemented.
This will get fixed.

Thanks for reporting!

[theMalt]

Many thanks for the swift response!

 

TheMalt