False Positive - Intuit Quickbooks FCS

[deadwinston]

Anti-Ransomware flagged Intuit Quickbooks FCS while running a Quickbooks 2013 update. It's difficult to find documentation on this exe, but it is involved in installing updates after they have been downloaded from what I was able to uncover. I can't remember if it was a program update or payroll update I was running at the time. 

 

After reboot, it would not release from Quarantine. I did a fresh install of Anti-Ransomware without rebooting and the program\service would only crash after that. I rebooted again with the same outcome. Had to remove and then reinstall so quarantine was gone. I was able to repair QB so the zip isn't the .exe from quarantine, but the replacement from after repair.

Intuit.QuickBooks.FCS.zip

logs.zip

Malwarebytes Anti-Ransomware.zip

[1PW]

Hello deadwinston and

Unfortunately a long deprecated version (Beta4 v0.9.12.336) is shown in the severely truncated logs.  Rather than a simple install with MBARW Beta6, please consider a clean install of MBARW Beta6:

1. Close all open user applications followed by a conventional Windows based uninstall of Malwarebytes Anti-Ransomware through the Windows system Control Panel.
2. If MBARW Beta was uninstalled successfully, the following sub-directories will have been deleted from a typical Windows 7 x64 system:

                         C:\Program Files\Malwarebytes\
                         C:\ProgramData\Malwarebytes Anti-Ransomware\
                         C:\ProgramData\MBAMService\

3. If any of the above directories remain, please delete them manually.  If necessary, any remaining/uninstalled directory must be deleted in the Windows Safe mode.
4. Execute a conventional Windows restart to the Normal Windows boot mode and log-in through an Administrator's account. <===IMPORTANT!
5. Using an Administrator's account only, download a fresh MBARW_Setup.exe file and save to the Administrator's Desktop from the MBARW Introduction topic.
6. Right-click the saved MBARW_Setup.exe file and left-click   Run as administrator from the context menu and continue.
7. Upon a successful installation, please restart the computer in a conventional manner to the Windows Normal boot mode.

Please reply to your topic with the status of your reported issue.  Thank you for beta testing MBARW and your valued feedback.