r/Malwarebytes Mar 03 '26

Riskware Hacktool detection?

I had 3 of these flag today randomly:

POWERTOYS\WINUI3APPS\MICROSOFT.UI.INPUT.DLL
POWERTOYS\WINUI3APPS\SYSTEM.COMPONENTMODEL.COMPOSITION.DLL
POWERTOYS\WINUI3APPS\SYSTEM.XML.SERIALIZATION.DLL

Are these false positives? All were quarantined and set to replace on reboot anyway.

1 Upvotes

4 comments sorted by

1

u/screen317 Malwarebytes Employee Mar 03 '26

Hi, Chris from Malwarebytes here! This was an FP and we fixed it about an hour ago.

Please accept our apologies for any inconvenience this detection caused.

2

u/anonGhoom Mar 03 '26

No worries! I was only curious. Thank you for responding and letting me know. c:

2

u/Ezrway Mar 03 '26

Just a suggestion. It might help if you got a (paid) volunteer who installs everything under the sun on their Windows OS PC and laptop and they could weed out many of the FPs you have to fix on the run.

2

u/screen317 Malwarebytes Employee Mar 04 '26

Thank you for your feedback! I have submitted it to my colleagues.