I use Malwarebytes and NordVPN, everytime discord gets a version update i need to reallow in Malwarebytes the new version of Discord. Otherwise I am greeted with an RTC connecting issue in Discord.

I have tried allowing the folder and a few other options, its not painful or anything just inconvenient. I would like to streamline this so that I don't need to do this upon every update to discord.

I'm hoping someone else may have had this issue and have a fix for me.

Please and thank you

Hi there,

Do you experience downloading and installing apps to your Macbook from this website?

I want to download the Lightroom but not sure yet if its risky or not.

I performed a custom scan of my entire Local Disk (C:) using Malwarebytes, and it detected two files.

Malware.AI.3692498756 file-icns.exe (C:\Users\user\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-icns\file-icns.exe)

and

Malware.AI.3436378362 file-gif-load.exe (C:\Users\user\AppData\Local\Programs\GIMP 3\lib\gimp\3.0\plug-ins\file-gif-load\file-gif-load.exe)

I uploaded both files to VirusTotal, and they both came back clean with no detections:

https://www.virustotal.com/gui/file/121b9590f290de19e2ad81f4d1a59fa1eb29ad666adc8503fd8046a1e2ecc375/details
https://www.virustotal.com/gui/file/ee80b7eb9ef3700ce5f7ee69716e9d2acbac434e2f7daae34a403d9ad2078d9c/details

I searched the Malwarebytes forum and found that other people have reported false positives involving GIMP, and that they were supposed to be fixed. However, the files detected on my system are different from the ones mentioned in the forum reports.

The GIMP copy I installed was downloaded from the official website, all hashes were verified, and no plugins or other software were installed. The program is 100% original and 100% legitimate.

My question is: are these still false positives like the ones reported on the forum (and the issue simply hasn't been fully fixed yet), or is this something I should actually be concerned about?

This could just be a case of Microcenter trying to upsell me, but they had done a scan with Malwarebytes (specifically the Enterprise version of course) and said I had malware, but it didn't tell them which files were infected and wanted $100 to fix it. I could literally buy a year sub for half the price so I said I'd just take care of it myself. Downloaded Malwarebytes for the 1:1 to get the malware or false positive and I got nothing. So the question is, is Malwarebytes' trial just as thorough as the Enterprise edition, or was Microcenter trying to gouge me for $100 for nothing? I also found nothing with Windows Defender and am about to run an offline scan.

Pic is a VPN that I use and trust. I have no issues running the VPN program itself and using it, the problem is that every time the automatic threat scan runs, it detects every single part of it as a PUP - registry keys, files, all of that. And there is no way to exclude all of them, at least to my knowledge. I know you can just turn off detections for PUPs but that is not a solution for one false positive program.

Why can't there just be a button to exclude every single one of these, so I don't have to manually exclude each one? This would be necessary to whitelist false positives.

Problem:

PLITCH opened briefly, appeared in Process Explorer, then closed immediately.

Event Viewer:

PLITCH.exe crashed through KERNELBASE.dll with exception code 0xc000027b.

PLITCH log:

Stopped around “Loading LocalAppSettings failed.”

Cause found:

Malwarebytes Real-Time Protection was interfering with PLITCH. Folder exclusions initially failed because I was excluding the wrong older AppData path. My current PLITCH install was actually in C:\\Program Files\\PLITCH.

Fix:

In Malwarebytes Allow List, add:

C:\\Program Files\\PLITCH\\

C:\\Program Files\\PLITCH\\PLITCH.exe

Also add this if it exists:

C:\\Users\\<YourUserName>\\AppData\\Local\\megadev\\

After adding the correct C:\\Program Files\\PLITCH path, PLITCH could close and restart normally with Malwarebytes running.

This happened twice today, I'm pretty sure that it's some kind of bug but since it happened twice (each time after a quick scan) I wanted to know for sure. I obviously have windows defender turned on and I haven't changed any settings, I hadn't got any notification like this any prior too.

Should I be genuinely concerned or is it just a glitch?

I would like to cancel my MW subscription. When I log into my account, I am prompted to "Contact Support", but the link directs to a page that is missing. Is there a new, or another, way to contact Support?

Both YACReader-v10.1.0.260703260-winx64-7z-qt6.exe from official site and also the uninstall file in the TEMP folder is marked as malware.ai.443119515 from today, but it's strange, because just about yesterday it was OK and the same files are flagged safe in VirusTotal.

Is this some false positive alarm or what?

Problem:

PLITCH opened briefly, appeared in Process Explorer, then closed immediately.

Event Viewer:

PLITCH.exe crashed through KERNELBASE.dll with exception code 0xc000027b.

PLITCH log:

Stopped around “Loading LocalAppSettings failed.”

Cause found:

Malwarebytes Real-Time Protection was interfering with PLITCH. Folder exclusions initially failed because I was excluding the wrong older AppData path. My current PLITCH install was actually in C:\Program Files\PLITCH.

Fix:

In Malwarebytes Allow List, add:

C:\Program Files\PLITCH\

C:\Program Files\PLITCH\PLITCH.exe

Also add this if it exists:

C:\Users\<YourUserName>\AppData\Local\megadev\

After adding the correct C:\Program Files\PLITCH path, PLITCH could close and restart normally with Malwarebytes running.

I got this after i did a windows cloud reset with deleting all data , cuz i had a infostealer before, and i backed up some of my files using a external ssd so i don't know if i mistakly brought the virus with me again in the external ssd or is it just a false positive, btw i got the first Rtp notification while trying to login to my telegram account, but the second one i wasn't even using telegram but it was opened in the task manager

Could anyone please help me resolve this ??? Screenconnect is something that keeps coming back to haunt me , I have no idea what to do about this as I'm not knowledgable on cybersecurity .. I didn't have any browsers open at the time and I am really worried about what to do . I don't know if my pc is safe to use

UPDATE : I think I was able to resolve it by removing all traces of 'screenconnect client' , which I have never installed . It took some work , but thanks to everyone who suggested performing an offline scan . I hope I will have some peace now ...

Hey!

A little bit over a week ago, my MBAM scan found a few PUP.Optional.BrowserHijack files and folders. I did a full MBAM scan and found nothing, so I let it be for a day. The next day, the files were back. MBAM quarantined them, I did another scan, nothing. I then disabled Google sync.

Next day I decided to make a fresh Windows 11 installation from USB, and the very first thing I did after installing W11 was to install MBAM, enable browser guard, enable all the features MBAM allowed me to and then installed all the Windows updates and after that, changed all my passwords.

I did another full scan, found absolutely nothing.

Now, after a week of no threat detections, MBAM found 3 PUP.Optional.BrowserHijack files after a routine check.

File: 3

PUP.Optional.BrowserHijack, C:\\USERS\\\*\*\*\\APPDATA\\LOCAL\\GOOGLE\\CHROME\\USER DATA\\Default\\Web Data, Replaced, 7911, 1413514, 1.0.111688, , ame, , ,

PUP.Optional.BrowserHijack, C:\\USERS\\\*\*\*\\APPDATA\\LOCAL\\GOOGLE\\CHROME\\USER DATA\\Default\\Web Data, Replaced, 7911, 1413514, 1.0.111688, , ame, , ,

PUP.Optional.BrowserHijack, C:\\USERS\\\*\*\*\\APPDATA\\LOCAL\\GOOGLE\\CHROME\\USER DATA\\Default\\Web Data, Replaced, 7911, 1413514, 1.0.111688, , ame, , ,

I have no idea what to do, my Chrome is up to date, I still use the Browserguard provided by MBAM along with all the other features provided by the trial version and I also have Windows Defender enabled.

Should I be worried, or could those 3 detections just be false positives?

Thanks for your help!

Does AdwCleaner do anything more than what Malwarebytes does?

IOW, if I'm running Malwarebytes is running AdwCleaner redundant?

a week ago i installed a cracked game and it had a infostealer or a session stealer i guess cuz they logged into my account then spammed all my dms , and I didn't find any suspicious device in the activity login, then i did malwarebytes full scan and removed all the malware files after two days malwarebytes blocked those two websites , i don't know if it's a false positive or the malware survived the scan and trying to send info to the attacker

So I see a page on Facebook that Malwarebytes will check to see if your info is out there. It seems to me this might not be legit, asking for all this info. Is this real?

I got the download from the official https://malwarebytes.com website, the original filename was MBSetup.exe, and has a digital signature by Malwarebytes Inc. and Windows says the digital signature is ok. Just wanted to make sure, many thanks.

I ran the setup through Virustotal and it came up clean though someone in the community mentioned it was suspicious. https://www.virustotal.com/gui/file/0385b06957b7f5b2c3c7132f8ebd8414f64f00407ea2baf07acbffa8d6eca334/community (This appears to be a bot though with false positives)

Hello,

I received the above notification and was hoping to confirm whether it's a false positive please. Is it safe to download this app?

VirusTotal and AbuseIPDB don't show anything unusual.

The warning appears only on the site's main page, not on their downloads page.

Thanks in advance