False Positive - hipchat file

[VBPlay]

This may be another false positive - Using HipChat daily since the Anti-Ransomware app was installed.  Same version of executable (AFAIK!) the entire time.

Attached is a snapshot of Anti-Ransomware UI along with the alert window before I dismissed the alert. Curious that the alert says it “moved to quarantine”, yet hipchat.exe is not listed in the quarantine and the offending executable is still in the original location.  After dismissing the alert, nothing changed w.r.t. the quarantine or hipchat.exe status.  When I tried to shutdown MATLAB it hung with the not-entirely-unfamiliar “A Background Operation Is In Progress” dialog.  Since I didn’t do anything within MATLAB before the alert appears, it seems plausible the Anti-Ransomware alert may have interfered with MATLAB’s file browser. All other applications shut down normally.

 

After rebooting, I cannot reproduce the warning, HipChat works just fine, the quarantine is still empty, and hipchat.exe is still in D:\Program Files (x86)\Atlassian\HipChat.

 

 

[1PW]

Hello VBPlay and

Please carefully read the locked and pinned topic in this sub-forum, How to report a False Positive and for developer analysis, kindly attach the 3 requested .zip archives to your next reply in this thread.

Then, if you wouldn't mind terribly, please consider upgrading from your system's Beta5 to Beta6 (v.0.9.15.416), released yesterday, to see if that eliminates that issue.

The Beta6 download may be found within post#1 of Introducing Malwarebytes Anti-Ransomware Beta.

Thank you for beta testing MBARW and your valued feedback.

 

 

[Decrypterfixer]

Thanks for the feedback!

Beta 6 Auto update will be release today. If you have not seen a prompt for the upgrade please use the link below:

 

Please let us know if the update fixes the issue you are having.

 

Thanks for the time testing our BETA!