Jump to content

False Positive (MachineLearning/Anomalous)


pblvsk

Recommended Posts

VirusTotal link: VirusTotal - File - 5a420449f0606c76af0a2ac0540df3b6e84655b34d008d591f7dbb6600bd5e8f

Hello, I'd like to report false positive, this is application I develop for my Valheim game server users allowing them to quickly install mods for the game. It started to be detected by Malwarebytes as of today (while being fine for last couple days).

NyVerdenModPatcher.zip

Link to post
Share on other sites

3 hours ago, pblvsk said:

Also attaching scan report.

Your scan report does not show a block. I also ran a scan on the file you submitted and also did not get a block.

If your report is just about the Virus Total results,

The engine format and configuration in VirusTotal is different than the consumer and corporate products’ default configuration. In VirusTotal Malwarebytes uses a command-line engine with different configuration and detection techniques/heuristics which might detect more than the commercial product. There are also false-positive suppression mechanisms in the commercial product which are not present in the command-line engine in VirusTotal.

This will eventually fix itself in Virustotal as well, as Malwarebytes has no control over this. Virus Total is having trouble reaching Malwarebytes cloud.

 

Link to post
Share on other sites

1 hour ago, Porthos said:

Your scan report does not show a block. I also ran a scan on the file you submitted and also did not get a block.

If your report is just about the Virus Total results,

The engine format and configuration in VirusTotal is different than the consumer and corporate products’ default configuration. In VirusTotal Malwarebytes uses a command-line engine with different configuration and detection techniques/heuristics which might detect more than the commercial product. There are also false-positive suppression mechanisms in the commercial product which are not present in the command-line engine in VirusTotal.

 

This will eventually fix itself in Virustotal as well, as Malwarebytes has no control over this. Virus Total is having trouble reaching Malwarebytes cloud.

 

 

 

I have just checked again and I am no longer seeing MB blocking the application. However it was being blocked, please see the attachement.

Screenshot_7.png

Link to post
Share on other sites

5 minutes ago, pblvsk said:

I have just checked again and I am no longer seeing MB blocking the application

In that case the AI fixed it automatically. That can occur 24 hours after the detection automatically.

Did you already restore the files from quarantine before running a new scan?

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.