False Positive - Compupic.exe

[6029KingStephen]

I think this is a false positive, as I have used the program for many years. Requested files are in the following OneDrive folder:

https://onedrive.live.com/redir?resid=E7D952868EC25BEC!618519&authkey=!AKPIXkKTQP7fj8E&ithint=folder%2crar

Also, while resolving this, after rebooting, I then got a positive on OfficeClickToOpen, and couldn't open any Office apps, though it did not show up in Quarantine. After another reboot it was OK again.

[1PW]

Hello 6029KingStephen and

Please carefully read the locked and pinned topic in this sub-forum, How to report a False Positive and for developer analysis, kindly attach the 3 requested .zip archives to your next reply in this thread.

Thank you for beta testing MBARW and your feedback.

[6029KingStephen]

Here are the three files, thanks:

 

Malwarebytes Anti-Ransomware.zip

logs.zip

compupic.zip

[1PW]

Reference: https://www.virustotal.com/en/file/887ae47d7f59e975e82a208d05af73c6ff9bff5e173fad339ace17a3d7947875/analysis/1414002701/ and https://www.virustotal.com/en/file/673bd9e509b934ba22e056221a0d0e7cbbb5dca4ecc6947bdd1e05eda8b432ec/analysis/

Hello 6029KingStephen:

Available data does suggest a false positive and, if it has not already been done, you may wish to make the following temporary full pathname file entry in MBARW GUI Dashboard -> Exclusions:

     C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.6741.2021\OfficeClickToRun.exe
     C:\Program Files (x86)\Photodex\CompuPicPro\compupic.exe

At any time, a development team member, QA team member or staffer may request the above temporary exclusion be removed.

Thank you for beta6 testing MBARW and your valuable feedback.