Ant Dude

Thanks.

Oh? Are there documentations on how that work in case I run into that which I hope is never.

Well, it would be bad if they are critical files for the OS.

Also, is there no edit my own post option?

I remember it recommened to remove the files. That would be bad if they are good files.

After seven minutes and 10 seconds, it said my G:\Windows was clean. Wow, in real-time? If we get these Malware.AI detections, should we rescan to double check? If so, then maybe MBAM should tell its users to rescan again to be sure they aren't FPs?

Hmm, now they are considered clean from my 7-Zip file. Did the definition updates get fixes from almost twelve hours ago? Let me to do a rescan of my G:\Windows (not doing all drives like I did overnight that took almost three hours to complete).

It seems unreliable with false positives like today's overnight scan in my decade old, updated PC with dual Windows boot setups (32-bit XP Pro. SP3 and 64-bit W7 HPE SP1). I hope these are really false positives (attached a 7z file with the EXEs and a screen shot/capture) since they never showed up as malicious before. Even with online scans (https://virusscan.jotti.org/en-US/filescanjob/zyph4syswd, https://r.virscan.org/language/en/report/0057a8b98f9c5854b830b299a7200abf, https://www.virustotal.com/gui/file/30c536948ce7a0c4e9417b88e81d77ac5c048917177dc06bc71dfa814900662d/details, and https://www.hybrid-analysis.com/sample/8ffc26bc2e827e94e534037bae4ab3fe3b7046a9f14977b6c77559d20ee3dfc2) confirm them being clean. Thank you for reading and hopefully fixing and answering soon. MBAMaiDetections.7z

MBAM says Malware.AI.4195089919 says for my C:\winstuff\LDPlayer3.97andUp\ldnews.exe file (attached a 7Zipped copy; you can download and install https://encdn.ldmnq.com/download/package/en/LDPlayer_ens_3.97.exe from its https://www.ldplayer.net/ official web site). MBAM didn't say that this before yesterday's updates and its required restart. Most online web sites' scanners says clean: https://r.virscan.org/language/en/report/7c99fdc096342ed679d88caed8a77629 https://metadefender.opswat.com/results/file/bzIwMDcxMTkyZE9ic19xX2h0ZjRyTUJxWXpx/regular/overview?lang=en https://www.hybrid-analysis.com/sample/dbe0b3cc202c3d690f03098d2e197b64acb5c05fe13b2bd821731969c6b538f3 says one supsicious. https://virusscan.jotti.org/en-US/filescanjob/e0bumjn8pq https://www.virustotal.com/gui/file/dbe0b3cc202c3d690f03098d2e197b64acb5c05fe13b2bd821731969c6b538f3/detection So, maybe a false positive? Thank you for reading and hopefully answering soon. :) ldnews.7z

That sounds like a minor bug to me.

I just rescanned, but got the same results. I exited MBAM and deleted my 12:22 PM hubblecache file to retest. It worked. Thanks. What happened there?

Still not fixed after a couple hours.

Interesting and weird.

Is it because my account is very old since I joined on 10/2/2009? IIRC, the forum was migrated from another system since then?

I never used SYNC feature in Firefox. Remember, I have the same issue in Safari, Chrome, and SeaMonkey on several devices.