stratecision Posted May 31, 2021 ID:1460649 Share Posted May 31, 2021 One of our program files is being identified as malware and being quarantined by Malwarebytes Premium. This is an exe file: ltcquote.exe How do we submit this for analysis? Ted Pass, CEO StrateCision Inc. tedpass@ltca.com www.ltca.com ltcquote.rar Link to post Share on other sites More sharing options...
Staff Atribune Posted May 31, 2021 Staff ID:1460684 Share Posted May 31, 2021 I've shared this with the appropriate team. Link to post Share on other sites More sharing options...
Porthos Posted May 31, 2021 ID:1460693 Share Posted May 31, 2021 www.ltca.com @gonzo will look into the current Browser Guard Reputation block on your site. Link to post Share on other sites More sharing options...
stratecision Posted June 1, 2021 Author ID:1460713 Share Posted June 1, 2021 we also sometimes see that our website, www.LTCA.com is being blocked by MWB. We believe this is because our customers can download files from the site that MWB labels as malware. Ted Pass, CEO StrateCision Inc tedpass@ltca.com Link to post Share on other sites More sharing options...
Porthos Posted June 1, 2021 ID:1460715 Share Posted June 1, 2021 Since today is a holiday, I suspect issues for you will be corrected on Tuesday. Link to post Share on other sites More sharing options...
stratecision Posted June 1, 2021 Author ID:1460723 Share Posted June 1, 2021 we hope so, this has come up before and MWB has analyzed our exe and found it is not malware. We thought this would be the end of the warnings and quarantines, but apparently not. Regards, Ted Pass, CEO StrateCision Inc. Link to post Share on other sites More sharing options...
Porthos Posted June 1, 2021 ID:1460724 Share Posted June 1, 2021 3 minutes ago, stratecision said: this has come up before and MWB has analyzed our exe and found it is not malware. Malwarebytes does not detect your file you attached. But I suggest you contact the other vendors in the following Virus Total report. https://www.virustotal.com/gui/file/ea7bc1919ff432f41672ee9c58579cfa480c260681e32dc2eddff42d18a1c5c2/detection The current Browser Guard Reputation block on your site is likely a heuristic detection and easily whitelisted. It is very aggressive at times. Link to post Share on other sites More sharing options...
stratecision Posted June 1, 2021 Author ID:1460726 Share Posted June 1, 2021 virustotal showed 14 security programs calling it malware and 54 finding nothing wrong. Does MWB use this count to decide what to flag? Is there a threshold that causes flagging? thanks, Ted Pass Link to post Share on other sites More sharing options...
Porthos Posted June 1, 2021 ID:1460728 Share Posted June 1, 2021 2 minutes ago, stratecision said: Does MWB use this count to decide what to flag? Is there a threshold that causes flagging? Malwarebytes does not divulge that info. Remember you file is not detected by Malwarebytes. Link to post Share on other sites More sharing options...
stratecision Posted June 1, 2021 Author ID:1460730 Share Posted June 1, 2021 not sure what you mean by our file is not detected by MWB. When we start our program, MWB immediately quarantines our file ltcquote.exe. At that point the program is disabled and can no longer be run. Whatever algorithm MWB is using, the effect is the same, our program is disabled. Link to post Share on other sites More sharing options...
Porthos Posted June 1, 2021 ID:1460731 Share Posted June 1, 2021 3 minutes ago, stratecision said: When we start our program, MWB immediately quarantines our file ltcquote.exe. Could you provide the log from the detection please. That will help Link to post Share on other sites More sharing options...
stratecision Posted June 1, 2021 Author ID:1460742 Share Posted June 1, 2021 Here is a log Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 5/30/21 Protection Event Time: 10:55 PM Log File: a1c4dcb6-c1bb-11eb-948b-989096ad4e44.json -Software Information- Version: 4.4.0.117 Components Version: 1.0.1308 Update Package Version: 1.0.41153 License: Trial -System Information- OS: Windows 10 (Build 19042.985) CPU: x64 File System: NTFS User: System -Blocked Malware Details- File: 1 MachineLearning/Anomalous.100%, C:\Stratecision\Quote\ltcquote.exe, Quarantined, 0, 392687, 1.0.41153, , shuriken, , DEBF2210E63E37613FEE0A9D9CB3017D, EA7BC1919FF432F41672EE9C58579CFA480C260681E32DC2EDDFF42D18A1C5C2 (end) log.txt Link to post Share on other sites More sharing options...
Porthos Posted June 1, 2021 ID:1460743 Share Posted June 1, 2021 Tuesday when staff returns, the above log will be a big help to correct your issue. Link to post Share on other sites More sharing options...
Staff cli Posted June 8, 2021 Staff ID:1462284 Share Posted June 8, 2021 Thanks for reporting, this has been whitelisted. 1 Link to post Share on other sites More sharing options...
stratecision Posted June 8, 2021 Author ID:1462336 Share Posted June 8, 2021 thanks for whitelisting, we appreciate it. Ted Pass, CEO StrateCision Inc. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now