Reply to thread

Message

<blockquote data-quote="SeriousHoax" data-source="post: 993249" data-attributes="member: 78686">I had an absolutely ridiculous false positive from MD today. I had some screenshots of a poem on my phone that I had to print for someone. I made a 7zip file containing those images, uploaded to a site from my phone. Then I opened that site in my PC to download the zip. But MD blocked the download with &quot;Trojan:Script/Ulthar.A!ml&quot; detection.Weird. I was using Edge to download. Then tried to download it via EagleGet Portable download manager and MD blocked it again.[ATTACH]267519[/ATTACH][ATTACH]267521[/ATTACH]I got curious, and this time created a 7zip file with password infected and uploaded to a different site from my phone and tried to download that on the PC. MD blocked it again with same detection even though it was password protected<img class="smilie smilie--emoji" loading="lazy" alt="🤦‍♂️" title="Man facepalming&nbsp; &nbsp; :man_facepalming:" src="https://cdn.jsdelivr.net/joypixels/assets/6.6/png/unicode/64/1f926-2642.png" data-shortname=":man_facepalming:" />[ATTACH]267520[/ATTACH]MD&#039;s machine learning is becoming quite aggressive about zip files. It also detects password protected malicious zip files, which makes it frustrating to test malware. Sometimes the malware included in those zips aren&#039;t even detected by MD so I don&#039;t understand the logic.But in today&#039;s experience, the zip files weren&#039;t even malicious. It contained harmless 5 image files. MD was running at default except PUA on, cloud timeout to 60 seconds and network protection.</blockquote>

[QUOTE="SeriousHoax, post: 993249, member: 78686"] I had an absolutely ridiculous false positive from MD today. I had some screenshots of a poem on my phone that I had to print for someone. I made a 7zip file containing those images, uploaded to a site from my phone. Then I opened that site in my PC to download the zip. But MD blocked the download with "Trojan:Script/Ulthar.A!ml" detection. Weird. I was using Edge to download. Then tried to download it via EagleGet Portable download manager and MD blocked it again. [ATTACH width="326px" alt="z.png"]267519[/ATTACH][ATTACH width="356px" alt="x.png"]267521[/ATTACH] I got curious, and this time created a 7zip file with password infected and uploaded to a different site from my phone and tried to download that on the PC. MD blocked it again with same detection even though it was password protected🤦‍♂️ [ATTACH width="340px" alt="c.png"]267520[/ATTACH] MD's machine learning is becoming quite aggressive about zip files. It also detects password protected malicious zip files, which makes it frustrating to test malware. Sometimes the malware included in those zips aren't even detected by MD so I don't understand the logic. But in today's experience, the zip files weren't even malicious. It contained harmless 5 image files. MD was running at default except PUA on, cloud timeout to 60 seconds and network protection. [/QUOTE]

Verification