Ransomware Detected #112

New issue

Open

opened 2022-02-25 11:29:05 +01:00 by aminiqmal39 · 2 comments

aminiqmal39 commented

2022-02-25 11:29:05 +01:00

(Migrated from github.com)

I'm using Malwarebytes Anti-Ransomware Beta Security and while using Discord Media Loader. Suddenly, Malwarebytes software detect ransomware attack from the Discord Media Loader itself and immediately quarantine the software. Does the attack come from media that i'm download from discord or your software?

Serraniel commented

2022-02-27 13:12:18 +01:00

(Migrated from github.com)

Do you know if there is something as a log or detailed information in the software which you could provide? It may help to understand why this happens.

A possible reason I could think of is because the tool, when downloading and saving, does a lot of IO operation and writing files to drive which they mind find suspiscious.

I also find it kind of weird they flag the executable itself, cause it does basically nothing. It only contains the splash screen and update routine via Github releases, the Application logic itself is deployed in the dlls.

It seems like malwarebytes is detecting the executable as a false positive. I tried running it through virustotal and malwarebytes is one of two vendors (out of 69) which flag the tool as malicious. https://www.virustotal.com/gui/file/da8a01781f74fdddcae9eadf716ef0e05f65de103b74a1d44e3a4e44f4fa44cf/detection Do you know if there is something as a log or detailed information in the software which you could provide? It may help to understand why this happens. A possible reason I could think of is because the tool, when downloading and saving, does a lot of IO operation and writing files to drive which they mind find suspiscious. I also find it kind of weird they flag the executable itself, cause it does basically nothing. It only contains the splash screen and update routine via Github releases, the Application logic itself is deployed in the dlls.

aminiqmal39 commented

2022-02-28 22:34:22 +01:00

(Migrated from github.com)

Thank you for responds. The problem didn't happen anymore or not yet, maybe the media i'm downloading contains ransomware. i guess.

Here log file. I don't know if it help much

Full Version
MBAMSERVICE.LOG

Medium Version
MBAMSERVICE.LOG

Short Version
MBAMSERVICE.LOG

Thank you for your work.

Thank you for responds. The problem didn't happen anymore or not yet, maybe the media i'm downloading contains ransomware. i guess. Here log file. I don't know if it help much Full Version [MBAMSERVICE.LOG](https://github.com/Serraniel/DiscordMediaLoader/files/8157135/MBAMSERVICE.LOG) Medium Version [MBAMSERVICE.LOG](https://github.com/Serraniel/DiscordMediaLoader/files/8157077/MBAMSERVICE.LOG) Short Version [MBAMSERVICE.LOG](https://github.com/Serraniel/DiscordMediaLoader/files/8157138/MBAMSERVICE.LOG) Thank you for your work.