My C# app is flagging as Spyware.PasswordStealer

[DeveloperRick]

Hi I need to publish a Windows application It seems like everything I build today is flagged as Spyware.PasswordStealer.

Applications I wrote 2 days ago are OK.

I have tried the closing malware and deleting C:\ProgramData\Malwarebytes\MBAMService

This does not clear the issue.  

What else can I try?

Thanks

[miekiemoes]

Hi,

Please post the detection log where the detection is displayed and/or zip and attach the file that was detected so we can have a look and adjust the detection.

[DeveloperRick]

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 12/08/2021
Scan Time: 12:34
Log File: 49c3452c-fb61-11eb-9a25-f46d045050f4.json

-Software Information-
Version: 4.4.4.126
Components Version: 1.0.1413
Update Package Version: 1.0.44060
Licence: Premium

-System Information-
OS: Windows 10 (Build 19042.1110)
CPU: x64
File System: NTFS
User: I5-RICK\rick

-Scan Summary-
Scan Type: Custom Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 1
Threats Detected: 1
Threats Quarantined: 0
Time Elapsed: 0 min, 21 sec

-Scan Options-
Memory: Disabled
Startup: Disabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 1
Spyware.PasswordStealer, "SOME FILE".EXE, No Action By User, 554, 968306, 1.0.44060, , ame, , 09AF4AEBBD4FDC4D8F2777E77B4B7721, 0F95BA1358ADE4449789B886776C8AB65EB02AB2DC0BCA1E67D58CB702DDA253

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

[DeveloperRick]

I have had to rename the actual file location as its a high profile customer who would not like their name associated with malware.  I can email it to you if you need it verbatium.

[miekiemoes]

Hi,

It's Ok, we have enough information. This will be fixed in next database update. 

Thanks for reporting!