Floxif Detection despite not downloading anything

[Gorbo]

Hi,

I just randomly had a pop up from malwarebytes saying there had been a detection and that it needs quarantined. I am sure that this question is brought up all the time but is there a way to tell if this is a false positive? I deleted the file as malwarebytes suggested but I suffer from anxiety and am having a hard time knowing if my PC is compromised or if everything has been done. Its worth mentioning that defender didnt find anything and after rebooting malwarebytes did not find any trace of it either.

Is there any way to check if this was a false positive? I havent downloaded anything between a scan yesterday and today so I am confused as to where this could have come from. I have attached the log file but unsure if there is anything else I can post.

Thanks,

Gordon

Malwarebytes Scan Report 2024-09-08 142954.txt Malwarebytes Scan Report 2024-09-08 142954.txt

[cli]

Thanks for reporting, this was an FP and will be fixed in 10 minutes.

You can use an online scanner like VirusTotal to give you an idea if the file is malicious. 

In your case, the report (https://www.virustotal.com/gui/file/c1c12e9e977e306be47e8fc6d8eab67ad7d0eea5d0dc5a79dec1e42ee45e1660) of the file that was detected came back with a score of 1/66 as in one security vendor out of 66 detected it. So chances are, the file is an FP. 

However it should be noted that just because a file has a low detection score, it does not mean it is 100% safe. 

[Gorbo]

Hi Cli,

Thanks for the response, that really helps to put my mind at ease, for future reference is there an easy way to check if something is an FP in the future?

Thanks,

Gordon

[Gorbo]

Sorry

2 hours ago, Gorbo said:

Hi Cli,

Thanks for the response, that really helps to put my mind at ease, for future reference is there an easy way to check if something is an FP in the future?

Thanks,

Gordon

Sorry looked again and can see that you have recommended scanning with virustotal but also just curious how you were able to scan the file as I had already deleted it and can't get it back to scan.

 

Gordon

[cli]

No worries. I grabbed the file's hash from the log and searched for the report. As to how the file got scanned, someone else who might have downloaded it from the same place you did sent it in to the online scanner. You would need to upload the file to get the report if the online scanner doesn't have the hash/report.

If you do use the online scanner, do NOT upload anything with personal information, passwords, etc into it.