js1428 Posted May 12, 2021 ID:1456431 Share Posted May 12, 2021 Hello, My Malwarebytes Premium software, which I have had for quite some time now, suddenly quarantined the file "Final_Draft_libFNP.dll" in the "Final Draft 10" folder in my "Program Files (x86)", citing "Malware.Heuristic.1001." This feels like a false positive, but I would like to check just to be sure. Thank you! Link to post Share on other sites More sharing options...
Porthos Posted May 12, 2021 ID:1456433 Share Posted May 12, 2021 Hi, Do you have "Use expert system algorithms to identify malicious files" enabled? It is located in Settings > Security> Scan option. This is normally disabled by default. Could you zip and attach the detected file and the log showing the detection as well please. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 12, 2021 Root Admin ID:1456545 Share Posted May 12, 2021 Hello @js1428 You can find Scan and Protection logs within the Malwarebytes 4 program in the following location RTP stands for Real-Time Protection and is where automatic protection operations would normally be logged If you click on the View option you should get something similar to the following with other options available. Link to post Share on other sites More sharing options...
js1428 Posted May 13, 2021 Author ID:1456629 Share Posted May 13, 2021 Hi @Porthosand @AdvancedSetup, Thank you both for your replies. I do have "Use expert system algorithms to identify malicious files" enabled by default (I can't really remember ever changing that setting). I have attached the log showing the detection, but I can't seem to zip and attach the detected file as I have quarantined it just to be sure? Thank you for your ongoing help! malware.heuristic.1001.txt Link to post Share on other sites More sharing options...
Porthos Posted May 13, 2021 ID:1456685 Share Posted May 13, 2021 3 hours ago, js1428 said: I do have "Use expert system algorithms to identify malicious files" enabled Turn off that setting so this will not happen. Link to post Share on other sites More sharing options...
Staff shadowwar Posted May 13, 2021 Staff ID:1456704 Share Posted May 13, 2021 This file has been whitelisted. Link to post Share on other sites More sharing options...
DebiKay Posted May 26, 2021 ID:1459557 Share Posted May 26, 2021 Greetings! Lurked forever, but posting now...new problem, but the same as above. Malwarebytes and a Final Draft LBB. Log file attached and ZIP of specific file in question attached. Hoping this can be whitelisted as well. Thanks! LogForFDinForum.txt Final_Draft_libFNP.zip Link to post Share on other sites More sharing options...
DebiKay Posted May 26, 2021 ID:1459558 Share Posted May 26, 2021 Sorry -- make that a DLL. Too early in my morning! (Yes, 1:30 in the afternoon is too early.) Link to post Share on other sites More sharing options...
Staff shadowwar Posted May 26, 2021 Staff ID:1459581 Share Posted May 26, 2021 This file has been whitelisted. 1 Link to post Share on other sites More sharing options...
DebiKay Posted May 26, 2021 ID:1459584 Share Posted May 26, 2021 Thank you so much @shadowwar! Link to post Share on other sites More sharing options...
Porthos Posted May 26, 2021 ID:1459604 Share Posted May 26, 2021 (edited) 2 hours ago, DebiKay said: Thank you so much Please turn off "Use expert system algorithms to identify malicious files" enabled? It is located in Settings > Security> Scan option to avoid these detections Edited May 26, 2021 by Porthos Link to post Share on other sites More sharing options...
DebiKay Posted May 26, 2021 ID:1459693 Share Posted May 26, 2021 Thanks, @Porthos, I had done that and gotten Malwarebytes to run with no detections. However, for various reasons, that adjustment is not something I'm comfortable leaving "off". Sorry -- I should have mentioned that in the first post...that I had turned off that setting, but still request the whitelist. Link to post Share on other sites More sharing options...
Porthos Posted May 26, 2021 ID:1459695 Share Posted May 26, 2021 1 minute ago, DebiKay said: However, for various reasons, that adjustment is not something I'm comfortable leaving "off". Thanks for reporting! FYI. This setting is in the experimental stage. That setting is to detect malformed files but sometimes legit files use protection that make them malformed. Malwarebytes is still tweaking the algorithms that is why it’s off by default. If you switch it on it is assumed, you are able to tell the difference between a FP and a legit detection. And if you keep it on, I suggest also turn off auto quarantine. Gives you the time to report FP's and not go thru the extra step to have to restore from quarantine. Link to post Share on other sites More sharing options...
DebiKay Posted May 26, 2021 ID:1459696 Share Posted May 26, 2021 4 minutes ago, Porthos said: And if you keep it on, I suggest also turn off auto quarantine. Gives you the time to report FP's and not go thru the extra step to have to restore from quarantine. Ah, thank you so much. I didn't even think of that. Much appreciated! 1 Link to post Share on other sites More sharing options...
Porthos Posted May 26, 2021 ID:1459697 Share Posted May 26, 2021 4 minutes ago, DebiKay said: Much appreciated! Have a good night and stay safe.🙂 Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now