False Positive From Malwarebytes

[hanna]

https://www.virustotal.com/gui/file/33a7adbd7610c7357dabfca2e6e929d77e320c9cb2f82135573568ed5fd0fe39?nocache=1
 

https://kurtzimmermann.com/files/RegCool.exe

https://kurtzimmermann.com/index_e.html

FREEWARE

Please correct

Edited May 18, 2022 by AdvancedSetup
Disabled live hyperlink

[Porthos]

5 minutes ago, hanna said:

Please correct

I do not see this detection with the installed version of Malwarebytes. Do you have the log showing the detection or are you only reporting due to the Virus Total results?

[hanna]

I report only due to the Virus Total results.

[hanna]

Downloading with Google Chrome and Firefox is blocked by false positive detection. Virus detection is based on VirusTotal. Only Edge works.

[Porthos]

4 minutes ago, hanna said:

I report only due to the Virus Total results.

The engine format and configuration in VirusTotal is different than the consumer and corporate products’ default configuration. In VirusTotal Malwarebytes uses a command-line engine with different configuration and detection techniques/heuristics which might detect more than the commercial product. There are also false-positive suppression mechanisms in the commercial product which are not present in the command-line engine in VirusTotal.

This will eventually fix itself in Virustotal as well, as Malwarebytes has no control over this.

 

A staff member will come along and confirm.

Edited May 18, 2022 by Porthos

[Porthos]

2 minutes ago, hanna said:

Downloading with Google Chrome and Firefox is blocked by false positive detection.

I had no issue downloading on any browser.

Do you have a screenshot of the block of the download?

[hanna]

Malwarebytes claims the file contains MachineLearning/Anomalous.100%, even though the file is totally clean. That's not possible! Download is not possible via various browsers. The file is blocked only because Malwarebytes is not working properly. Please correct that. I can't wait for it to correct itself.

[hanna]

[Porthos]

14 minutes ago, hanna said:

That warning has nothing to do with Malwarebytes. Seems like  Firefox has an over aggressive setting enabled.

Edited May 18, 2022 by Porthos

[hanna]

Have you tried this with the latest Firefox 100 and the current Google Chrome? No problem?

[Porthos]

3 minutes ago, hanna said:

Have you tried this with the latest Firefox 100 and the current Google Chrome? No problem?

Firefox works, Chrome blocks it.

[Porthos]

8 minutes ago, hanna said:

the latest Firefox 100

[shadowwar]

This was whitelisted earlier today it will just take some time for virustotal to reflect that. I have also added additional whitelist protections. But porthos is correct the screenshot is not malwarebytes. 

[hanna]

I would like to thank you very much for your effort.

[hanna]

Unfortunately, the error is still not fixed in the detection. Google blocked RegCool.exe, had to rename the same file to SetupRegCool.exe, now suddenly it doesn't contain any virus anymore. So much for virus detection by Google Chrome and Firefox.
Unfortunately, Malwarebytes still recognizes the program as a virus, as well as another program, TweakPower. Please correct that. Here are the 2 problem cases.

https://www.virustotal.com/gui/file/b210a5c7ba3567867cee50413f24d1db536f06b211f2f47d5917133b80767b69
https://kurtzimmermann.com/files/TweakPower.exe

https://www.virustotal.com/gui/file/de8238527abc81d0a72e288a334a430fd476435a0910a23582945fc3555ef028?nocache=1
https://kurtzimmermann.com/files/SetupRegCool.exe

 

Edited May 20, 2022 by AdvancedSetup
Disabled live hyperlink

[Porthos]

3 hours ago, hanna said:

Unfortunately, Malwarebytes still recognizes the program as a virus, as well as another program, TweakPower. Please correct that. Here are the 2 problem cases.

Not detected again with the installed version.

On 5/18/2022 at 1:30 PM, Porthos said:

The engine format and configuration in VirusTotal is different than the consumer and corporate products’ default configuration. In VirusTotal Malwarebytes uses a command-line engine with different configuration and detection techniques/heuristics which might detect more than the commercial product. There are also false-positive suppression mechanisms in the commercial product which are not present in the command-line engine in VirusTotal.

This will eventually fix itself in Virustotal as well, as Malwarebytes has no control over this.

 

A staff member will come along and confirm.

 

[AdvancedSetup]

Please post the Scan and Protection logs from Malwarebytes so that we can review them.

 

You can find Scan and Protection logs within the Malwarebytes 4 program in the following location

 

 

RTP stands for Real-Time Protection and is where automatic protection operations would normally be logged

 

 

If you click on the View option you should get something similar to the following with other options available.

 

 

 

 

Thank you

 

[hanna]

I can't post the Malwarebytes scan and protection logs for you to review. I'm just referring to VirusTotal's Malwarebytes OnlineSan. TweakPower is no longer recognized. Thanks very much. Unfortunately, RegCool continues. Please fix this.

https://kurtzimmermann.com/files/SetupRegCool.exe

https://www.virustotal.com/gui/file/de8238527abc81d0a72e288a334a430fd476435a0910a23582945fc3555ef028?nocache=1

[Porthos]

15 minutes ago, hanna said:

Unfortunately, RegCool continues. Please fix this.

RegCool  is not detected by the consumer or commercial versions of Malwarebytes.

The engine format and configuration in VirusTotal is different than the consumer and corporate products’ default configuration. In VirusTotal Malwarebytes uses a command-line engine with different configuration and detection techniques/heuristics which might detect more than the commercial product. There are also false-positive suppression mechanisms in the commercial product which are not present in the command-line engine in VirusTotal.

This will eventually fix itself in Virustotal as well, as Malwarebytes has no control over this. Virus Total is having trouble reaching Malwarebytes cloud.

[hanna]

I know that of course. However, there are people who first look at a test on Virustotal before downloading the program or Microsoft and Google also work together with Virustotal, so I would really appreciate it if you were able to remove the false positive. I don't want to be accused of distributing a virus just because you have bugs in the program.
https://docs.microsoft.com/en-us/connectors/virustotal/

[shadowwar]

The bug is with virustotal. They have trouble reaching our cloud for whitelisting. 

[hanna]

Thanks