False Positive - MB is deleting my BAT files

[DFB721]

Several years ago I wrote a small .BAT file to back up my PC to a USB drive.  The last time I ran it MB called it ransomware, and quarantined it.  I had a backup copy on a USB drive.  I ran that, and MB did the same thing attain.  Is this file really ransomware?  If so, how does MB know?  If not, how can I tell MB to stop deleting the file? 

I'm attaching the file in question (zipped) and a test file with the scan result.  

I have MB 3.1.2.1733

Regards, 

DFB721

 

BU_FULLK.zip

DFB_170819.txt

[LiquidTension]

Hi DFB721,

Thank you for the report. This does indeed appear to be a false-positive.

Please could you download and run our ARWLogs diagnostic tool using the link below: https://malwarebytes.box.com/s/fpbjgxi0cp1feswku3a5d3c92iggv9rp

This will create a ZIP file on your Desktop. Please attach this in your next reply.

[shadowwar]

This should be fixed now. Please provide the report so we can look at why the bat file tripped our heuristics for ransomware.

Thanks!

 

[DFB721]

I ran the BAT file again, and it failed again.  

I ran the diagnostic you requested.  It produced a file of 81.08 mb.  When I attempted to attach it to this e-mail, I received an error message that I was only allowed to attach files up to 29.3 mb.  

Thanks for working on this.  It's still a problem.  

Regards, 

DFB721 

 

[tetonbob]

Hi @DFB721 - Can you use the instructions in Ron Lewis' (AdvancedSetup) post here to use WeTransfer for the large archive upload please?

 

Also, have you tried adding your .bat file to Malwarebytes exclusions?

https://support.malwarebytes.com/docs/DOC-1130

 

Edited August 22, 2017 by tetonbob
MB3 exclusions link