False positives - Malware.AI.3379829119 - picking up MalwareBytes software

[memcu_matt]

Got a bunch of hits for Malware.AI.3379829119 on my weekly scan.  Is alerting on MBREMOTE.EXE which appears to be MalwareBytes own remote distribution packages?

[memcu_matt]

Malware.AI.3379829119

File

Malware

Quarantined

C:\PROGRAMDATA\MALWAREBYTES DISCOVERY AND DEPLOYMENT\REMOTEPUSH\MBREMOTEEXEC.EXE

[Mikebob]

same here, also on the network deployment tool

[Mikebob]

I should say the deployment tool, as well as the installer files on each endpoint

[blender]

Hello,

Can you zip and attach a sample file please along with a log of the detection?

Thank you,

[Mikebob]

attached is the fileMBRemoteExec.zip

[shadowwar]

This should be no longer detected. 

[Juiceycow]

5 hours ago, Mikebob said:

I should say the deployment tool, as well as the installer files on each endpoint

Do the endpoint installers live in C:\Windows\? That's where I was getting triggers on a few PCs: eg C:\WINDOWS\MBREMOTEEXEC-13904-(PC name).EXE

(as well as the above mentioned C:\PROGRAMDATA\MALWAREBYTES DISCOVERY AND DEPLOYMENT\REMOTEPUSH\MBREMOTEEXEC.EXE)

Thanks for posting, glad to see I wasn't the only one having the same issues.