AMSWIN.EXE false positives

[NickD]

I'm using MWB Anti-Ransomware together with Symantec Endpoint Protection 12.1.5 MR5 Small Business. Periodicaly (once a week, eg Monday) trying to start my application amswin.exe is blocked by MWBAR (quarantined). Scanning for viruses for this pc find no viruses (Sym. Endpoint Protection, actualised deffinitions). When I restore amswin.exe from quarantine it works, but after a week or so I have the same issue again. Is this a false positive? Can you please analyse this EXE? I do not want to put this file on the exception list, while I'm not sure if is clean.

Best regards,

NickD

AmsWin.zip

logs.zip

Malwarebytes Anti-Ransomware.zip

[1PW]

Reference: https://www.virustotal.com/en/file/90ee2d1ed0e2dc61289c0354e2f72067b77f59dab8b3fc1117c005be3320f168/analysis/1459174426/

Hello NickD and

Available data does suggest a false positive and, if it has not already been done, you may wish to make the following temporary full pathname file entry in MBARW GUI Dashboard -> Exclusions:

C:\Program Files (x86)\AssFiNET\AMS\AmsWin.EXE

Thank you for beta testing MBARW and your valuable feedback.