Jump to content

Recommended Posts

After enabling Use Expert System Algorithms, Threat Scans now yield false positives of Malware.Heuristic.1001 in C:\Windows\Installer for Corel Video Studio Pro and Malware.Heuristic.1003 for InstallShield Blank Project Template. Additionally, Malwarebytes Premium also gives false positives of Malware.Heuristic.1003 for QuarkXPress' Updater in C:\ProgramData\Quark. I am not sure if this is due to excessively invasive copy protection schemes being employed by both Corel Corporation and Quark, or overly zealous heuristics in Malwarebytes?

1938753306_FalsePostivesonCorelQuarkfiles.zip

Link to post
Share on other sites
3 hours ago, Trapp said:

After enabling Use Expert System Algorithms

FYI. This setting is in the experimental stage.

That setting is to detect malformed files but sometimes legit files use protection that make them malformed. Malwarebytes is still tweaking the algorithms that is why it’s off by default. If you switch it on it is assumed, you are able to tell the difference between a FP and a legit detection. 

And if you keep it on, I suggest also turn off auto quarantine. Gives you the time to report FP's and not go thru the extra step to have to restore from quarantine.

Please turn off "Use expert system algorithms to identify malicious files" enabled? It is located in Settings > Security> Scan option to avoid these detections

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.