Hypersensitivity

john_dashwood
john_dashwood Posts: 5 New Member
in Device Protection

F-Secure, lastly ver. 25.3 on Windows 10 Probook 650 G1 became too sensitive. Recognizes file MultiCommander.exe as malware and deletes it. However sometimes it deletes also winword.exe, swriter.exe and AcroRd32.exe.

Like Awesome

Answers

  • JOnes
    JOnes Posts: 911 Forum Guru

    If what you're saying is true, the last time F-Secure products did something similar was in the 1990s, the product names at the time were F-Prot and F-Secure Anti-Virus. As we know, history repeats itself from time to time.😀There has been some rumours about Avira union and F-Secure,wonder this has something to do with it..?

    Like Awesome
  • john_dashwood
    john_dashwood Posts: 5 New Member
    hypersensitivity-letter.png

    Here is F-Secure's raport.

    Like Awesome
  • JOnes
    JOnes Posts: 911 Forum Guru
    edited April 27

    Well.my Polish language is not so good as it used to be😀,but from google translation it looks like the application Multicommander.exe has been blocked not deleted.The online description of the event could be more precise.In this case you should send a sample to Lab of the blocked file(s)

    https://www.f-secure.com/en/support/submit-a-sample

    1Like Awesome
  • john_dashwood
    john_dashwood Posts: 5 New Member

    Maybe it is blocked but I can not find it original directory. Sometimes it blocks (removes from original directory) files: winword.exe, swriter.exe and AcroRd32.exe but says that it blocked MultiCommander.exe.

    Like Awesome
  • JOnes
    JOnes Posts: 911 Forum Guru
    edited April 27

    Have you checked the quarantine,the file could be moved there also and you can also bypass the inspection there if you are sure that the file is clean.

    Like Awesome
  • john_dashwood
    john_dashwood Posts: 5 New Member

    Yes, the the quarantine contains several files MultiCommander.exe but does not contain winword.exe, swriter.exe and AcroRd32.exe those disappeared. After that I had to reinstall LibreOffice, Word and AdobeReader.

    Like Awesome
  • JOnes
    JOnes Posts: 911 Forum Guru

    Are you able to send to send the multicommander.exe from quarantine to lab so they can inspect that ?In the meantime you should avoid using it.Where did you get it in the first place?

    MultiCommander is generally safe to use if you have downloaded it from an official or trusted source, such as its official website or reputable software repositories.

    However, as with any software, there are a few things to keep in mind:

    1. Download from trusted sources: Always make sure you download MultiCommander from its official website or well-known, reputable software distribution platforms (e.g., GitHub, Softpedia, etc.). Avoid third-party download sites, as they may bundle unwanted software or malware with the installation.
    2. Check for unwanted software: When installing, carefully read the prompts and make sure no unwanted software (adware, toolbars, etc.) is included in the installation package. It's always a good idea to use a custom installation option if available, which lets you opt out of any additional software.
    3. Antivirus check: If you're still unsure about the file, you can always scan MultiCommander.exe with your antivirus software or use an online service like VirusTotal to check it for potential threats.
    4. System behavior: If MultiCommander starts running on your system without your knowledge, or you haven't installed it, it might be worth investigating further. It's possible that a program you installed bundled MultiCommander, or it could be an indication of unwanted software.

    In summary:

    • Yes, MultiCommander is safe if you download it from trusted sources.
    • Always be cautious with installation settings to avoid additional unwanted software.
    Like Awesome
  • john_dashwood
    john_dashwood Posts: 5 New Member

    Yes, I downloaded it from its official website. I have send a copy not from the quarantine but a copy of a file I have installed. I manually checked it with F-Secure and it said OK. F-Secure recognizes MultiCommander.exe as malware when application connects its server to make an update or after updating application not when it works only as two panel file manager.

    Like Awesome
  • JOnes
    JOnes Posts: 911 Forum Guru
    edited April 27

    Ok,you should send a sample with detail info(name deleted files upon detecting it asmalware) to Lab of the incident.i may well be a false positive..Be aware that the inspection may take a while,according my experience even weeks..

    1Like Awesome

Categories