False Positive - C:\PROGRAM FILES (X86)\WATCHGUARD\WSM11\UNINSHS.EXE

[BobSoul]

The following false positives occurred today -- ( Nebula end point) on the router software for Watchguard routers.... which as of previous scans it never detected till the latest update today.

 

• Path: C:\PROGRAM FILES (X86)\WATCHGUARD\WSM11\UNINSHS.EXE
• Action Taken: Quarantined
• Scan time: 2021-09-16T18:01:00Z
• Report time: 2021-09-16T18:26:47.970415185Z
• Threat name: Malware.AI.1239893535
• Path: HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WatchGuard System Manager 11.12_is1
• Action Taken: Quarantined
• Scan time: 2021-09-16T18:01:00Z
• Report time: 2021-09-16T18:26:47.970415185Z
• Threat name: Malware.AI.1239893535

Malwarebytes Diagnostics (1).zip

[BobSoul]

This is on the endpoint nebula version  for business so may have posted in wrong forum -- but endpoint doesn't have a specific false  positive forum it seems

[BobSoul]

Actually happens as well on a personal home version that happens to have same software installed on for watchguard router at home.

 

[cli]

Thanks for reporting, this will be fixed in 10 minutes.

[BobSoul]

Thank You - IM assuming my other false  positive with photoshop files is a false ID as well :)

 

[BobSoul]

I havent checked this on the nebula endpoint or the premium 4.4.6 as of yet - but I will tomorrow - give the updates time to filter through