Jump to content

False positive Fastcopy.exe


HenkvS

Recommended Posts

False positive:

When using Fastcopy to copy a number of files from an active Boxcryptor volume (based on encrypted folder containing BC volume) to an active Truecrypt volume (based on encrypted file containing TC volume) Anti-Ransomware falsely flagged the "agent" Fastcopy as ransomware and quarantained it.

Fastcopy is just a well-known utility for rapid file transfers, backups etc. and the EXE itself does not even include any encryption capabilities. Probably, in this scenario (copying files between two  volumes that each were using their own on-the-fly encryption-and-decryption) Anti-Ransomware would have falsely flagged any other file-copying software as well.

MBAMSERVICE.LOG.zip

Malwarebytes Anti-Ransomware.zip

Somehow, the zip I made of Fastcopy.exe got lost in the posting process. Here it is.

FastCopy.zip

Link to post
Share on other sites

Reference: https://www.virustotal.com/en/file/bbfb1f5ed4cde5d9f8d1c768784f5ce0dc7c4ae03f2747bf66780bd79af4909d/analysis/1458489550/

Hello HenkvS and :welcome:

Available data points to a false positive and you might consider temporarily entering the following full pathname in MBARW GUI -> Exclusions:

C:\Program Files\FastCopy\FastCopy.exe

Thank you for beta testing MBARW and your valued feedback.

Link to post
Share on other sites

  • 2 weeks later...

HenkvS (or anyone else),

Are there any known issues with Boxcryptor? It's a product for encrypting cloud storage, so it installs a CBFS driver and performs encryption on the PC. I would like to test Anti-Ransomware, but I'd like to at least know of any gotchas with Boxcryptor first. Also, what about Viivo, a similar product?

 

Thanks,

 

Link to post
Share on other sites

Hello @asdflkjlkj and :welcome:

It is less confusing for everyone if a "One Member Per Topic" policy is adhered to instead of posting to the topic of another member.

Development Team Members, Staffers and helpers will be able to more easily provide both you, and the OP/Topic Starter, with individualized assistance.

Please start a NEW, and SEPARATE topic by left-clicking this >>Start New Topic<< link now.

Thank you always for your patience and understanding.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.