Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FALSE POSITIVE] Malwarebytes flags EXE file as malware #3

Closed
robinhood2014 opened this issue Jun 15, 2024 · 1 comment
Closed

[FALSE POSITIVE] Malwarebytes flags EXE file as malware #3

robinhood2014 opened this issue Jun 15, 2024 · 1 comment

Comments

@robinhood2014
Copy link

After hearing about yet another vulnerability in Windows, I decided to boost my Internet security by downloading and installing Malwarebytes. When I ran my first scan, Malwarebytes flagged two files as malware -- hostscompress-x64.exe, and a modified version of Steven Black's hosts file which I compressed using the same. I've never had any malware problems using these files before, so why is Malwarebytes choosing now to warn me about what I believe to be a false positive? I'm enclosing the scan log.
false-positive.txt

@Lateralus138
Copy link
Owner

Lateralus138 commented Jun 15, 2024

Thank you for bringing this to my attention @robinhood2014, but yes, this is most certainly a false positive.

All of my source files and my build files are available for scrutiny by the public here at this repository and anyone who can look can see there are no external resources being inserted at build time. Everything at this repository is stored and built here and all logs are available for every action taken.

My assumption is that because of the very nature and capability of this program (altering a secure system file and directly at that) it is flagged. This is not surprising. I have nothing to hide.

There is no network capability in this tool and the only file it creates (and/or alters) is the hosts file itself, which is specifically what this tool is for (of course).

Most "malware" and "virus" tools flag behavior and it is flagging the aforementioned task of altering the hosts file.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants