Jump to content


Photo

False positive - 4PL-Insight

false positive 4pl insight 4pl-insight anti cheat

  • Please log in to reply
6 replies to this topic

#1 Flaxe

Flaxe

    New Member

  • Members
  • Pip
  • 5 posts

Posted 25 November 2012 - 02:36 PM

Hi.

I'm a competetive Battlefield 3 player and there's a German league called 4pl that got an own developed Anti-Cheat program called 4PL-Insight. I don't know exactly how this program works, but I'm pretty sure it could be seen as some kind of virus by Malwarebytes.

I've whitelisted the program itself, but everytime 4PL-Insight starts a BF3 Match, it creates some .tmp files, so everytime I'm going to play a match with 4PL I have to disable Malwarebytes to avoid all these warnings or I have to ignore the .tmp files all time.

Is it possible for you to whitelist this application and the .tmp files it create?
If you need anymore information, please tell me and I will provide whatever I can.

Best regards,
Flaxe

#2 Flaxe

Flaxe

    New Member

  • Members
  • Pip
  • 5 posts

Posted 25 November 2012 - 03:42 PM

Didn't find a way to edit my post, but I thought of adding this.

The .tmp file is here: C:\Users\**My Accountname*\AppData\Local\Temp\gkk549C.tmp

and the "virus" is: VirTool.Vbcrypt

#3 Flaxe

Flaxe

    New Member

  • Members
  • Pip
  • 5 posts

Posted 25 November 2012 - 03:43 PM

Didn't find a way to edit my post, but I thought of adding this.

The .tmp file is here: C:\Users\**My Accountname*\AppData\Local\Temp\gkk549C.tmp

and the "virus" is: VirTool.Vbcrypt

Sorry for spamming... but note that the name of the .tmp file is new every time.. but I guess you understood that already.

#4 shadowwar

shadowwar

    Forum Deity

  • Moderators
  • PipPipPipPipPipPip
  • 5,277 posts
  • Gender:Male

Posted 25 November 2012 - 04:59 PM

Can you please attach a scan log of the detection and the file itself in zip format? I dont have much to go on at the moment to fix this.
Rich Matteo
Research Engineer

staff.png

Follow us: Twitter, Become a fan: Facebook

#5 Flaxe

Flaxe

    New Member

  • Members
  • Pip
  • 5 posts

Posted 25 November 2012 - 05:25 PM

Can you please attach a scan log of the detection and the file itself in zip format? I dont have much to go on at the moment to fix this.

I've attached a zip with only the two files from 4PL-Insight that is detected as virus. Attached File  4PL-Insight virus files.zip   4.66MB   32 downloads

I did also attach the five temp files that have been created by the program. Note that these temp files only get created when a BF3 Match is started, so if you're not playing in 4PL League yourself you won't be able to create any .tmp files, but all of them should be kinda the same anyway I guess... Attached File  temp files.zip   8.98MB   37 downloads

Also scan logs of the install directory and appdata\local is attached. Attached File  logs.zip   1.64KB   31 downloads

If you want to install the whole 4PL-Insight program yourself, you can download it from their site here: http://4pl.4players....html?setlang=en.

Thanks again. If you need anything more just tell me!

#6 miekiemoes

miekiemoes

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 7,677 posts
  • Gender:Female
  • Location:Belgium

Posted 26 November 2012 - 01:00 AM

Hi,

Thanks for the files. This will be fixed in next database update.
Mieke Verburgh
Director of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook

#7 Flaxe

Flaxe

    New Member

  • Members
  • Pip
  • 5 posts

Posted 26 November 2012 - 12:46 PM

Thank you, Malwarebytes Staff!
It went extremely fast to get this fixed, didn't expect that :)

Thanks again.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users