Jump to content

False positive: Microsoft Office 365


bullseye
 Share

Recommended Posts

Hi:

 

Welcome. :)

 

First, please be sure you are running the most current beta build, beta5, as per the link in this pinned topic.

 

If that doesn't resolve your issue, in order to better assist the developers, you might want to please provide a bit more information/logs, as per this pinned topic: How to report a False Positive

 

Thank you,

Link to post
Share on other sites

Thank you for the info. The MBAR is the latest version. As for the other parts:

  • Finish the detection process and reboot if asked by Anti-Ransomware. Was not asked
  • After reboot disable the Anti-Ransomware protection. No reboot
  • Restore the file from Quarantine and add it to the exclusions. Nothing in quarantine
  • Find the restored EXE file that was quarantined, right-click on it and click "Send To >> Compressed (Zipped) Folder". Attach this ZIP file also to your report. I repaired the installation but have no idea which file triggered the MBAR, haven't triggered again yet
  • Create a ZIP of the directory C:\ProgramData\Malwarebytes\Malwarebytes Anti-Ransomware\ and attach it to your post. Attached
  • Create another ZIP of the directoy C:\ProgramData\Malwarebytes\MBAMService\logs\ and attach it to your post. Attached

logs.zip

Malwarebytes Anti-Ransomware.zip

Link to post
Share on other sites

Hello @bullseye:
 
Please create a zipped file, of the system's following installed executable, for further developer team analysis:
 
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.6568.2025\OfficeClickToRun.exe

Similarly to your #3 post above, please attach the above zipped file to your next reply.

Thank you for beta testing MBARW and your valued feedback.

Link to post
Share on other sites

Hello @bullseye:

 

Please create a zipped file, of the system's following installed executable, for further developer team analysis:

 

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.6568.2025\OfficeClickToRun.exe

Similarly to your #3 post above, please attach the above zipped file to your next reply.

Thank you for beta testing MBARW and your valued feedback.

 

There was no such file in the directory, only two dll.

This one is from the ClickToRun folder, maybe it'll help some. I'll check it later if it might reappear. :)

OfficeClickToRun.zip

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.