Possible false positive issetup.dll

[smjones70]

Hi,

I picked up this detection today on ISSETUP.DLL.  As near as I can tell this is from a Dell printer scanner driver.  Can you verify this is a false positive please?

I've attached 2 logs - one with expert system algorithms on and the other with it off.  I've also zipped the offending file and attached it.

Thanks for your help!

issetup detection w Expert System ON.txt ISSetup.zip issetup detection w Expert System off.txt

[Porthos]

25 minutes ago, smjones70 said:

one with expert system algorithms on and the other with it off.

I suggest you keep that feature off. That is the default setting.

Thanks for reporting!

It is to detect malformed files but sometimes legit files use protection that make them malformed. Malwarebytes is still tweaking the algorithms that is why it’s off by default. If you switch it on it is assumed you are able to tell the difference between a FP and a legit detection. 

And if you keep it on I suggest also turn off auto quarantine. Gives you the time to report FP's and not go thru the extra step to have to restore from quarantine.

[cli]

Thanks for reporting, this will be fixed in 10 minutes.

[smjones70]

I assume this was a false positive then?

Thx for your help!

[Porthos]

27 minutes ago, smjones70 said:

I assume this was a false positive then?

Yes