False Positives

[DK1]

System Info

OS Name    Microsoft Windows 7 Professional
Version    6.1.7601 Service Pack 1 Build 7601
MBAR : Beta 0.9.14.361

 

First false positive occurred while running Easus ToDo Backup Workstation 8.9. Snagged agent.exe but never showed up in quarantine. Added to exclusions and file was never moved from what I can tell.

 

Second was Launchy 2.5 Freeware App. Found in quarantine on reboot. Didn't stop the MBAR service before restore and was prompted that explorer.exe was about to be quarantined. This didn't actually happen thankfully and laptop survived the reboot.

 

Attached files :

Launchy_EasusToDoBackupAgent.zip > both executables

Logs.zip > includes window cap of explorer.exe notification

Malwarebytes Anti-Ransomware.zip

 

Launchy_EasusToDoBackupAgent.zip

logs.zip

Malwarebytes Anti-Ransomware.zip

[DK1]

Addendum : MBAR GUI seems to have stopped seeing the MB3Service as it is unable to start by "Fix Now" button or  "Start Protection" link.

 

Manual start through service console worked. GUI still not reporting service as running, Exited GUI from systray agent show Connection Lost window : Unable to connect to the Service.

 

Restarting GUI and it is still reporting as disabled.

[1PW]

Hello DK1:

Only because of the issue you presently observe, please create the following new files for developer analysis:

Create a ZIP file of the directory C:\ProgramData\Malwarebytes\Malwarebytes Anti-Ransomware\
Create another ZIP file of the directory C:\ProgramData\Malwarebytes\MBAMService\logs\

Please attach the above zipped files to your next reply and then do a conventional Windows uninstall & reinstall of Beta5, MBARW 0.9.14.361 and include the status of the system's issue in your next reply.

Thank you for your participation DK1.

[DK1]

Rebooting the laptop fixed the GUI issues.

logs.zip

Malwarebytes Anti-Ransomware.zip