# Malwarebytes blocking app access due to Malware.ai detection

**URL:** <https://community.localwp.com/t/malwarebytes-blocking-app-access-due-to-malware-ai-detection/43069>\
**Category:** Support\
**Created:** [May 24, 2024, 4:20pm UTC](https://community.localwp.com/t/malwarebytes-blocking-app-access-due-to-malware-ai-detection/43069 "2024-05-24T16:20:03Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![Haugendaus](https://sea1.discourse-cdn.com/flex019/user_avatar/community.localwp.com/haugendaus/32/21885_2.png) [@Haugendaus](https://community.localwp.com/u/Haugendaus)\
**Post date:** [May 24, 2024, 4:20pm UTC](https://community.localwp.com/t/malwarebytes-blocking-app-access-due-to-malware-ai-detection/43069/1 "2024-05-24T16:20:03Z")

</div>

### What issue or error are you experiencing?

Malwarebytes suddenly started quarantining a temporary file that gets generated when the Local app starts up. This just started today (5/24/2024), even with the latest version of the Local app on Windows 11. It blocks the app from running entirely.

The message from Malwarebytes looks similar to this:

- Blocked Malware Details-
- Malware.AI.3744253770, C:\Users\*\*\*\*\*\*\AppData\Local\Temp\bc9b065b-d94c-4207-bfe6-83a4bb863b20.tmp.node

I’m guessing this is a new detection method Malwarebytes is using? I don’t really know. It was working fine yesterday with Malwarebytes running.

## The document Malwarebytes links to about this detection method is located here: [Malware.AI | Malwarebytes Labs](https://www.malwarebytes.com/blog/detections/malware-ai)

### What steps can be taken to replicate the issue? Feel free to include screenshots, videos, etc

If anyone runs the Local app and uses Malwarebytes on Windows or Mac, I’d be interested to know if you’re having this issue. I can still run the app if I close Malwarebytes first, but I don’t think I should have to.

* * *

### System Details

AMD Ryzen 7 7800X3D, 64GB RAM,

- **Local Version:**  
Local v9.0.3+6684
- **Operating System (OS) and OS version:**  
OS: Windows 11 Home v23H2, OS Build 22631.3593

* * *

### Local Logs

[local-lightning.log](https://community.localwp.com/uploads/short-url/yLUQBh1f3WqT4VuDA9Quxaxh1Ju.log) (96.6 KB)  
[local-lightning-verbose.log](https://community.localwp.com/uploads/short-url/lvP9DBvdyTo45Ed7oV207SZWoye.log) (304.4 KB)

* * *

_ **Security Reminder** _  
Local does a pretty good job of scrubbing private info from the logs and the errors it produces, however there’s always the possibility that something private can come through. Because these are public forums, always review the screenshots you are sharing to make sure there isn’t private info like passwords being displayed.

---

<div class="post-metadata">

**Author:** ![Nick-B](https://sea1.discourse-cdn.com/flex019/user_avatar/community.localwp.com/nick-b/32/16140_2.png) [@Nick-B](https://community.localwp.com/u/Nick-B)\
**Post date:** [May 24, 2024, 4:28pm UTC](https://community.localwp.com/t/malwarebytes-blocking-app-access-due-to-malware-ai-detection/43069/2 "2024-05-24T16:28:49Z")

</div>

Hi @Haugendaus

Does Malwarebytes have any way to “allow” or “ignore” a certain app or file?

If you downgrade your Local app does this still happen?

> **[Downgrade Local Version](https://localwp.com/help-docs/troubleshooting/downgrade-local-version/)**
>
> Downgrading Local may be used to troubleshoot issues presented with a newer version or other various reasons. We recommend running Local on the latest version available when possible.

---

<div class="post-metadata">

**Author:** ![Haugendaus](https://sea1.discourse-cdn.com/flex019/user_avatar/community.localwp.com/haugendaus/32/21885_2.png) [@Haugendaus](https://community.localwp.com/u/Haugendaus)\
**Post date:** [May 24, 2024, 4:43pm UTC](https://community.localwp.com/t/malwarebytes-blocking-app-access-due-to-malware-ai-detection/43069/3 "2024-05-24T16:43:34Z")

</div>

Hi @Nick-B

I looked for a way to allow the file, but Malwarebytes, for this case anyway, doesn’t have that option. However, even if it did have a way to allow the file, that file would have a different file name next time I ran Local, since it’s a temporary file. Every time I run the app, the file that’s quarantined has a new generated file name. I didn’t see a way to ignore the app in Malwarebytes either, unfortunately.

As for downgrading the app, I was running the previous version of Local, which was running fine alongside Malwarebytes as of yesterday. I only upgraded the app to the latest version today, after I started having this issue with Malwarebytes.

Hope that helps!

---

<div class="post-metadata">

**Author:** ![Nick-B](https://sea1.discourse-cdn.com/flex019/user_avatar/community.localwp.com/nick-b/32/16140_2.png) [@Nick-B](https://community.localwp.com/u/Nick-B)\
**Post date:** [May 24, 2024, 4:51pm UTC](https://community.localwp.com/t/malwarebytes-blocking-app-access-due-to-malware-ai-detection/43069/4 "2024-05-24T16:51:17Z")

</div>

Checking in the forums I can see that users have reported some issues with Malwarebytes in the past. Some have even had success in reporting false positives:

> [@RESOLVED - Updated to local 7.1.0+6396, Malwarebytes reports ransomware in php-cgi.exe](https://community.localwp.com/t/resolved-updated-to-local-7-1-0-6396-malwarebytes-reports-ransomware-in-php-cgi-exe/38450/2):
>
> FYI - I reported this to Malwarebytes as a false positive, updated my malwarebytes with today’s updates and it no longer reports the ransomware false positive. Topic can be closed.

---

<div class="post-metadata">

**Author:** ![Haugendaus](https://sea1.discourse-cdn.com/flex019/user_avatar/community.localwp.com/haugendaus/32/21885_2.png) [@Haugendaus](https://community.localwp.com/u/Haugendaus)\
**Post date:** [May 24, 2024, 4:55pm UTC](https://community.localwp.com/t/malwarebytes-blocking-app-access-due-to-malware-ai-detection/43069/5 "2024-05-24T16:55:54Z")

</div>

Yep, I saw that post. I’ll see if there is anything else I can do in Malwarebytes to get past this. If I just quite Malwarebytes, I can run Local just fine, then restart Malwarebytes without issues.

---

<div class="post-metadata">

**Author:** ![Nick-B](https://sea1.discourse-cdn.com/flex019/user_avatar/community.localwp.com/nick-b/32/16140_2.png) [@Nick-B](https://community.localwp.com/u/Nick-B)\
**Post date:** [May 24, 2024, 5:30pm UTC](https://community.localwp.com/t/malwarebytes-blocking-app-access-due-to-malware-ai-detection/43069/6 "2024-05-24T17:30:50Z")

</div>

Okay thank you for the details here. I’m not sure how we can influence this from our end but if issues persist or change keep us posted and we’ll be happy to continue investigating.

---

<div class="post-metadata">

**Author:** ![Haugendaus](https://sea1.discourse-cdn.com/flex019/user_avatar/community.localwp.com/haugendaus/32/21885_2.png) [@Haugendaus](https://community.localwp.com/u/Haugendaus)\
**Post date:** [May 24, 2024, 5:39pm UTC](https://community.localwp.com/t/malwarebytes-blocking-app-access-due-to-malware-ai-detection/43069/7 "2024-05-24T17:39:03Z")

</div>

It does seem like an issue with Malwarebytes, but thanks for your feedback!

I’ll post any updates if/when they happen.

Thanks!

---

<div class="post-metadata">

**Author:** ![Nick-B](https://sea1.discourse-cdn.com/flex019/user_avatar/community.localwp.com/nick-b/32/16140_2.png) [@Nick-B](https://community.localwp.com/u/Nick-B)\
**Post date:** [May 24, 2024, 5:47pm UTC](https://community.localwp.com/t/malwarebytes-blocking-app-access-due-to-malware-ai-detection/43069/8 "2024-05-24T17:47:39Z")

</div>

Anytime @Haugendaus! If you have any other questions or concerns don’t hesitate to reach back out. We are always happy to help!

---

<div class="post-metadata">

**Author:** ![Haugendaus](https://sea1.discourse-cdn.com/flex019/user_avatar/community.localwp.com/haugendaus/32/21885_2.png) [@Haugendaus](https://community.localwp.com/u/Haugendaus)\
**Post date:** [May 24, 2024, 5:55pm UTC](https://community.localwp.com/t/malwarebytes-blocking-app-access-due-to-malware-ai-detection/43069/9 "2024-05-24T17:55:28Z")

</div>

Well, one final follow-up (I think): I found where in Malwarebytes to allow both the Local app and the Local/Temp/ folder where the .tmp file is saved and was getting flagged. Seems to let me get past the quarantine at least.

For my case, the folder to exempt is located at:  
"C:\Users\username\AppData\Local\Temp"

Thanks again!

---

<div class="post-metadata">

**Author:** ![Nick-B](https://sea1.discourse-cdn.com/flex019/user_avatar/community.localwp.com/nick-b/32/16140_2.png) [@Nick-B](https://community.localwp.com/u/Nick-B)\
**Post date:** [May 24, 2024, 5:58pm UTC](https://community.localwp.com/t/malwarebytes-blocking-app-access-due-to-malware-ai-detection/43069/10 "2024-05-24T17:58:25Z")

</div>

Awesome! Thank you for sharing that. It might help other users running into the same.

---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/community.localwp.com/system/32/1_2.png) [@system](https://community.localwp.com/u/system)\
**Post date:** [August 22, 2024, 5:59pm UTC](https://community.localwp.com/t/malwarebytes-blocking-app-access-due-to-malware-ai-detection/43069/11 "2024-08-22T17:59:02Z")

</div>

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.
