[RESOLVED] Malwarebytes warns it is ransomware

[SoN9ne]

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 9/28/18
Protection Event Time: 11:59 PM
Log File: 1c1f7b0e-c39c-11e8-9fb7-1c1b0d016815.json
Administrator: Yes

-Software Information-
Version: 3.5.1.2522
Components Version: 1.0.374
Update Package Version: 1.0.7055
License: Premium

-System Information-
OS: Windows 10 (Build 17134.285)
CPU: x64
File System: NTFS
User: System

-Ransomware Details-
File: 1
Malware.Ransom.Agent.Generic, G:\SteamApps\steamapps\common\Breathedge\Breathedge\Binaries\Win64\Breathedge.exe, Delete-on-Reboot, [0], [392685],0.0.0

Just leaving this here.

[K1NG_0F-N0TH!NG]

It's fine, it's not ransomware. I used to use Malwarebytes, but now use Kaspersky because it detects things Malwarebytes couldnt. I scanned the file and the .EXE and it's showed up in Kasperskys database over 1,000 times without any issues. You should be fine unless your computer is just infected.

[Kepano_808HI]

Originally posted by Frank_Dukes:

It's fine, it's not ransomware. I used to use Malwarebytes, but now use Kaspersky because it detects things Malwarebytes couldnt. I scanned the file and the .EXE and it's showed up in Kasperskys database over 1,000 times without any issues. You should be fine unless your computer is just infected.

Everyone says that about the "other product"....this one detects what this one didnt...blah blah blah...

[K1NG_0F-N0TH!NG]

Everyone says that about the "other product"....this one detects what this one didnt...blah blah blah... [/quote]

Well I started using Kaspersky after CC cleaner got hacked or whatever happened and I had a Malwarebytes Premium subscription that couldn find it, so I downloaded a trail version of Kaspersky and it found it on the first scan. I could really care less if you believe me, but Thats why I use Kaspersky Total security now. Plus it does things that Maleware bytes doesnt. Protects websites and browsers from collecting your data etc. It's better in everyway. You can try a free version and figure that out for yourself if you're a bright little star.

[Phoenix]

virustotal.com lists breathedge.exe (main folder) as 2/67 and breathedge.exe in the binaries folder as 0/67. Your call.

[Lizard]

Malwarebytes is a piece of ♥♥♥♥ that think that anything compiled in Russia is automaticly malware...

[MycroftCanadaNS]

Originally posted by Frank_Dukes:

It's fine, it's not ransomware. I used to use Malwarebytes, but now use Kaspersky because it detects things Malwarebytes couldnt. I scanned the file and the .EXE and it's showed up in Kasperskys database over 1,000 times without any issues. You should be fine unless your computer is just infected.

It's obvious that you do not know that Kaspersky is banned to be used in the US government becauses it's a data miner right?

Haaa, Kaspersky is one of the worst products you can ever use.

[No-E]

I agree with MycroftCanadaNS, Kaspersky is itself a virus. How can you honestly trust the game isn't stealing data, multiple sources are siting it, and do you have any idea how many cyber attacks are coming out of Russia and China directed at America everyday? Has Steam verified itself that the game is safe? I mean, look at some of the titles on this app store, talk about a lack of quality control, and who knows just how safe they are. Anti-malware programs can only protect you if they have the malware definition on file. You download a completely new piece of malware and chances are you won't have any protection against it.

[Redruinsdev]

Hello everybody, we have checked the game with Eset NOD, Malwarebytes (latest version) and AVG. There are no viruses. You should check you system to virus from other place.

[The Plum Gate]

Originally posted by Redruinsdev:

Hello everybody, we have checked the game with Eset NOD, Malwarebytes (latest version) and AVG. There are no viruses. You should check you system to virus from other place.

Good News!

[Firesped]

malwarebytes just threw the game into quarantine on my system. likely a false positive

[Firesped]

I sent in a copy of the file on my computer at malwarebytes so they can confirm it. I was playing the game when it suddenly just stopped and then I went to reload the game and it failed as the file was missing because malwarebytes quarantines it when some instruction ran in the game that likely trigged the flag.

[SoN9ne]

Yes, it seems to be a false flag. I too sent it to Malwarebytes.

As for what is the best Anti-virus debate. That's a toss up. I find Malwarebytes to be the best (mostly from my days of it being the #1 choice for fixing infected systems). Of course, since they all compete they all have different databases. So one anti-virus program may find it faster than another. I've had too many issues with Kaspersky. I'm fine with Malwarebytes. I prefer a false flag over not detecting anything in the first place.

I removed the game from quaratine and don't see anything in the traffic that suggests it's any kind of malware. My machine is not infected so a false flag is all that seems to have happened.

I did want to make note this happened at midnight. I will test again to see if I get another flag.

[Redruinsdev]

Hello everybody, we have solved this issue with malwarebytes. They told us that update will be in an hour. You need to:
1. Open Malwarebytes
2. Click on Dashboard on the left
3. Next to where it says updates I would like you to click on "Current"

settings[ybex.com]

[SoN9ne]

Awesome, thanks for the update.

[MycroftCanadaNS]

Originally posted by SoN9ne:

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 9/28/18
Protection Event Time: 11:59 PM
Log File: 1c1f7b0e-c39c-11e8-9fb7-1c1b0d016815.json
Administrator: Yes

-Software Information-
Version: 3.5.1.2522
Components Version: 1.0.374
Update Package Version: 1.0.7055
License: Premium

-System Information-
OS: Windows 10 (Build 17134.285)
CPU: x64
File System: NTFS
User: System

-Ransomware Details-
File: 1
Malware.Ransom.Agent.Generic, G:\SteamApps\steamapps\common\Breathedge\Breathedge\Binaries\Win64\Breathedge.exe, Delete-on-Reboot, [0], [392685],0.0.0

Just leaving this here.

Malwarebytes see's windows updates as ransomware as well at times so I wouldn't be bothered by this false positive.

Malwarebytes use to be a decent enough program now it's nothing more than someting to wipe your bum with.

Besides, the only people who have to use these sort of antivirus programs, and these sort of pieces of software are those who either dabble in visiting porn sites, downloading illegal software, or who only seem to know on how to turn their computers on, and nothing else.