malwarebytes identifies Power19 .exe as ransomware

Forum Index » PowerDVD (previous versions)

jpdavi

Newbie Joined: Sep 17, 2019 13:17 Messages: 2 Offline

Solved by

Sep 17, 2019 13:25

I just purchased PowerDVD 19 from the cyberlink Corp. web site. I tried to install it today. Malwarebytes identified PowerDVD.exe as ransomware and quarantined the program.

I'm running Malwarebytes version 3.8.3.

Any advice would be greatly appreciated.

More details:
Malwarebytes Info
Version: 3.8.3.2965
Components Version: 1.0.625
Update Package Version: 1.0.12523
License: Premium
-System Information-
OS: Windows 10 (Build 17763.737)
CPU: x64
File System: NTFS
User: System
-Ransomware Details-
File: 1
Malware.Ransom.Agent.Generic, C:\Program Files\CyberLink\PowerDVD19\PowerDVD.exe, Quarantined, [0], [392685],0.0.0

Norton scan reports the file is OK.

This message was edited 2 times. Last update was at Sep 17. 2019 13:43

QC2.0

Senior Contributor Joined: Apr 27, 2016 04:02 Messages: 610 Offline

Sep 18, 2019 05:34

You can go to virustotal.com.
It will help you identify if the powerdvd.exe is truly a ransomware or not using perhaps more than 40 different antivirus programs scanning.
https://www.virustotal.com/

powerdvd19 has been released for months. We know it is not a ransomware.

If your PC is not guranteed as super clean before installing powerdvd, that will be another story.
The ransomware comes from other sources else.

jpdavi

Newbie Joined: Sep 17, 2019 13:17 Messages: 2 Offline

Sep 18, 2019 10:36

Thank you for the virus scanning web site. very nice. I ran the PowerDVD.exe through this site and only 1 engine found an issue.
It was the eGambit engine - Unsafe.AI_Score_99%. The other 68 engines report nothing detected.