False Positive: mscorsvw.exe

[REGITDept]

Dear Malwarebytes,

 

I believed this to be a false positive.

 

Malwarebytes has blocked ransomware activity.

Process: mscorsvw.exe

Action: Moved to Quarantine

 

No file found in Quarantine doh.

 

Thanks.

Malwarebytes Anti-Ransomware.zip

logs.zip

[1PW]

Hello REGITDept:
 
Please create the following zip archive for developer analysis:

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

Please attach the above zipped archive to your next reply.
 
Thank you for beta testing MBARW and your feedback.

[REGITDept]

File attached per requested.

 

Thanks.

mscorsvw.zip

[1PW]

Hello REGITDept:

 

The above flagged executable may indeed be a false positive. If you have not already, you may wish to add it to MBARW Beta's Exclusions list until a correction has been made.

 

Thank you.