Hello,
C:\Program Files (x86)\Open Practice 8.0\OP.Home.exe
C:\Program Files\Open Practice 8.0\OP.Home.exe
This program is being stopped on some PC's (but not others)
The full path and file name has been added to quarantine (days ago) but it is still being blocked (It seems to ignore quarantine)
Yes, we have the right path :-) on each PC
As a work around, We disable the MBARW program, open OP.Home then re-enable MBARW
This worries me as I bet the end user will forget to re-enable MBARW and they got infected this morning
Any help would be appreciated
Kind Regards
Shane
FYI: MBARW stopped the Crypto this morning but some files were encrypted on the PC and on a shared server drive
Note: MBARW is NOT installed on the server, only the workstations (we are aware it is BETA)
Files.zip
Malwarebytes Anti-Ransomware.zip
Encrypted Files.zip