False Positive: WinDirStat

[clic]

Hi,

Anti Ransomware warned me about a Ransomware like activity from the program WinDirStat. https://windirstat.info/

 

This software is able to bulk delete complete directories without using the recycle bin - similar activity as ransomware does.

 

See attached files.

 

_Malwarebytes_Anti-Ransomware.zip

ZIP of Malwarebytes Anto-Ransomeware directory

 

_MBAMSERVICE.ZIP

ZIP of log file

 

_windirstat.zip

ZIP of windirstat.exe

 

kind regards

Christian

[1PW]

Hello clic:

Please create the following additional zipped file for developer team analysis:

C:\ProgramData\Malwarebytes\MBAMService\logs\

Please attach the above zipped file to your next reply.

Thank you for your participation in the MBARW Beta testing program.

[clic]

Hello,

the log file I attached to my firts post was from this directory.

Here a new one again:

_logs.zip

 

 

[1PW]

Hello clic:

 

You were correct. Thank you.