Jump to content

False Positive: "Environment Modules" generated by our update system


JonathanGilbert
 Share

Recommended Posts

Our update system has a web service which generates so-called "Environment Modules". Their only purpose is to bundle a configuration INI file and pass it off to a utility that is already installed on the machine. Recently, these started being flagged as malware. See the following VirusTotal report:

https://www.virustotal.com/gui/file/f24dc7aacc163758130b33e0d4d92ece586bd7ca8e9ad879f73d455cee1fca11?nocache=1

According to VirusTotal, the MalwareBytes engine is detecting our generated Environment Module as "Malware.AI.1953650300".

It is my understanding that participants in VirusTotal are able to retrieve the sample directly from the VirusTotal database. If this is not the case for MalwareBytes, please let me know how I should supply a sample file.

Please update your engine so that this kind of file is not flagged as malware.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.