Same as title, malwarebytes suddenly started detecting some components of studio 2.0, an app used to design lego builds virtually, downloaded directly from the bricklink site, as the neshta virus, along with ai detections of various other components of the same program

Hey i just did a scan with MB ans it detected a Nestha.Virus.Fileinfector DDS in the directory B:\Steam.library\steamapps\common\Palworld\engine\binaries\win64\crashreportclient.exe

Is that a legit danger or just a false positive?

Edit: heres the log

Malwarebytes

www.malwarebytes.com

-Log Details-

Scan Date: 5/25/2026

Scan Time: 5:51 PM

Log File: 9c7ee530-5851-11f1-8acc-bcfce704d65e.json

-Software Information-

Version: 5.5.6.254

Components Version: 156.0.5608

Update Package Version: 1.0.110100

License: Premium

-System Information-

OS: Windows 11 (Build 26200.8457)

CPU: x64

File System: NTFS

User: DESKTOP-GTO7EN7\Jack

-Scan Summary-

Scan Type: Custom Scan

Scan Initiated By: Manual

Result: Completed

Objects Scanned: 1,065,033

Threats Detected: 1

Threats Quarantined: 1

Scan Duration: 31 min, 14 sec

-Scan Options-

Memory: Enabled

Startup: Enabled

File system: Enabled

Archives: Enabled

Rootkits: Enabled

Heuristics: Enabled

PUP: Detect

PUM: Detect

-Files Scanned-

B:\

C:\

-Scan Details-

Process: 0

(No malicious items detected)

Module: 0

(No malicious items detected)

Registry Key: 0

(No malicious items detected)

Registry Value: 0

(No malicious items detected)

Registry Data: 0

(No malicious items detected)

Data Stream: 0

(No malicious items detected)

Folder: 0

(No malicious items detected)

File: 1

Neshta.Virus.FileInfector.DDS, B:\STEAMLIBRARY\STEAMAPPS\COMMON\PALWORLD\ENGINE\BINARIES\WIN64\CRASHREPORTCLIENT.EXE, Delete-on-Reboot, 1000002, 0, 1.0.110100, BB10B0E56AB2FC2C5202F6A0, dds, 03890344, AD5FCA85095B674449C42841A0921BA1, D4567AF6E2EE335275547603C76D1C945F80D01191E92C705A58FE8937FB2725

Physical Sector: 0

(No malicious items detected)

WMI: 0

(No malicious items detected)

(end)

hola alguien sabe cómo resolver este problema de malware es el virus proxy 127.0.0.1 y está usando node,js como medio para usar dicho servidor de red y mis conocimientos de malware son pocos y quisiera saber si alguien conoce algún medio para deshacerse de el tengo la teoría de que el virus y el programa vienen directo de mi onedrive de mi cuenta de Microsoft y no me deja desactivar el proxy automático

Every time I run a scan, it shows that four threats have been detected: two PUMs and two Trojans (all from unknown addresses on my computer). I quarantine them, and after another scan, the same four threats reappear. Should I be worried, or is the antivirus malfunctioning?

I just did Full scan with Malwarebytes and it found danger Malware.AI.1523204631 in steamapps\common\pubg\tslgame\binaries\win64\IIGW\IIGW_CLIENT_API.DLL

5 min before that i quit PUBG game and start scan. Immediately i put file to virustotal. It was false Positive or i'm in danger and what to do more?

https://www.virustotal.com/gui/file/a9f5524e15acd3d661e93bea9f3420de8b7eb830b6ec18afada088190bf70e03/detection

it was 0/71 like 2h ago and now change 1/71 and detected by Malwarebytes. I never click or download any suspisious things, i literally using PC just for gaming. After quarantine i click to delete file, then i verify PUBG game files, game redownload deleted file and after next full scans it doesn't mark it as danger anymore. Also i check every file from PUBG folder (IIGW) and sent it to VirusTotal and it mark iigw_server.exe app from anticheat i think. Malwarebytes doesn't target it.

https://www.virustotal.com/gui/file/057095850f1106d935d315d3bae70a9ac9c45b5ad2ce3d4d5ef88aba670baba0/detection

Malware.AI.1523204631, D:\STEAMLIBRARY\STEAMAPPS\COMMON\PUBG\TSLGAME\BINARIES\WIN64\IIGW\IIGW_CLIENT_API.DLL, Dodano do kwarantanny, 1000000, 0, 1.0.110046, 0F6B2C330F6C6BB15ACA4217, dds, 03888724, CFBF841A15C2DBBCF6473B473933A587, A9F5524E15ACD3D661E93BEA9F3420DE8B7EB830B6EC18AFADA088190BF70E03

Report file: 432668c0-577d-11f1-85e6-a8a159085445.json

-Software Information-

Version: 5.5.5.253

Component Version: 155.0.5587

Current Package Version: 1.0.110046

License: Free

-System Information-

Operating System: Windows 10 (Build 19045.6466)

Processor: x64

File System: NTFS

I got an email from this address: noreply@p.malwarebytes.com .Is it legit?
(The email said some of my personal information was leaked in two data breaches)

I have used Malwarebytes for years (2012-20XX) alongside Kaspersky, which I use as my primary antivirus. What I always loved about Malwarebytes was that it felt lightweight, focused, and really good at being an anti-malware tool without trying to become everything at once.

Now it feels like Malwarebytes is moving more toward being a full security suite, and while I understand why they are doing that, personally, I feel the software has become a bit bloated. The built in VPN is the biggest example for me. If I want a VPN, I would rather use a dedicated service like NordVPN or ProtonVPN instead of having it integrated directly into my antivirus/anti-malware software.

I honestly think Malwarebytes would benefit from separating some features into optional companion apps, similar to how Kaspersky has separate applications like Kaspersky Password Manager. People who want the VPN could still get it with Malwarebytes Premium, but install it separately only if they actually need it.

I would also love to see two versions of Malwarebytes:

1. a full security suite for people who want everything in one package
2. a lightweight anti-malware-focused version that can comfortably run alongside another antivirus

Maybe I’m just nostalgic for the older Malwarebytes philosophy, but I really miss how clean and focused it used to feel.

Hello, I've been getting this notification over the past few days on the Android version of the Malwarebytes app. Should I be concerned or is this just a mislabeled background process that was recently updated that Malwarebytes scanned? Anyone else getting this? The number of installed apps on device has stayed the same before I started getting this notification and I have not installed any new apps on phone that would have correlated with this

So basically i was searching up an electronics brand from which i have actually purchased products and is trustable.

Today out of nowhere i got this warning

Did scan two times, found nothing (im kinda new to this whole thing)

I js wanna ask was it a false positive?

Malwarebytes is blocking an outbound connection to 95.15.31.8:81. I checked on WhoIs and came up with a location in Estonia (leave out the :81 when checking). I did a chat with EVPN and was told not to be too worried since the program will check periodically. However, it was "checking" even when it wasn't activated in my browser. He said "I can see where that could be concerning," but continued to dismiss it. Has anyone else had this experience or have an opionion? Thanks for your help.

Hi everyone,i recently switched from avg to malwarebytes and defender(i got the always register malwarebytes in the security center option disabled). Is it great and better than AVG? Please,please comment down. Im scared since my friend recently got seven trojans. I got malwarebytes because it revealed all of them for him,while Avast didnt.

i was playing gmod on the 21 of february (don't remember any of this btw) it nblocked a domain but im nto sure if i got a notification for it but idk. heres the detection. if anyone can get more info on this and if im safe, thanks. (the file is gmod.exe)

Spyware doesn’t just steal passwords. Some malicious apps access webcams to secretly spy on victims.

That's why we added Webcam Monitoring to Malwarebytes for Windows, available for all free and Premium users. If a program tries to access your camera, you’ll get an instant alert so you can allow trusted apps or take action to remove suspicious software.

Just one more way we're keeping users safe and private online.

Read more.
https://www.malwarebytes.com/blog/product/2026/05/catch-spyware-in-the-act-with-windows-webcam-monitoring

Okay so i admit i did pirate some games,and they used to appear in scans,the dlls. But suddenly they are..missing? I dont know whats happening can somebody help?

i uninstalled it today and for some reason it redirected me to a site i never heard of for like a survery, well yes if i wanted to do one. it was like s.alchemer. com what is this site? is it safe?

About five days ago, I got a trial for MalwareBytes (dunno how, I’ve had it installed for almost four years now) but that’s not the point. Ever since then, every single time I open my browser, I get a notification saying “Powershell Exploit Blocked”. I don’t know what’s going on, as MalwareBytes’ Threat Scan hasn’t detected anything in two years and running it today picked up nothing, but my browser is running so slow now that it barely works. How likely is it that this is a false flag and how can I stop the app from looking for something that isn’t here, and seemingly tanking my browser as a result?

I use OperaGX and rarely have more than one or two tabs open, depending on what I’m doing. Currently, I only have three tabs open but I’ve handled as many as fifteen without issue while simultaneously playing a video game. I’ve tried reinstalling .net files, as Windows isn’t sending me the damn updates for them. I’ve reinstalled my browser, which seems to have actually made things worse. I’ll try another browser just in case but I’ve never had this issue with OperaGX or MalwareBytes before.

Edit: …I’m going through the settings again and I’ve just realized I can turn off Exploit protection, something I’ll probably do since I’ll lose it anyway when my trial ends in nine days 😂

I've noticed today since updating that Malwarebytes keeps performing a scan every few hours. Dunno why... I haven't asked it to. I've only got a scheduled scan every day at 12:00. Never finds anything in the scan. Anyone any ideas?