Albatross365 Posted November 2, 2017 ID:1178531 Share Posted November 2, 2017 The application for running a science app which is part of the TN-Grid BOINC project flagged as Ransomware The creator of the application has scanned it at Virus Total: https://www.virustotal.com/it/file/5e90d85043a707be0d38f657d703d09c90b63dd944b742820085220203873e5a/analysis/1509635813/ gene_pcim_v1.02_win64__fma.zip tn-grid false positive.txt Link to post Share on other sites More sharing options...
Staff miekiemoes Posted November 2, 2017 Staff ID:1178538 Share Posted November 2, 2017 Hi, Can you check and verify if this is still being detected? Because according to our end, it shouldn't be anymore as this has been fixed. Thanks! Link to post Share on other sites More sharing options...
Albatross365 Posted November 2, 2017 Author ID:1178540 Share Posted November 2, 2017 Apologies for any confusion. I noticed I'd posted in the wrong place so reposted here. I've removed the exclusion and will let you know if anything happens when I next get some work to process from them. Link to post Share on other sites More sharing options...
Albatross365 Posted January 3, 2018 Author ID:1196153 Share Posted January 3, 2018 Hi, This file just got flagged again. Link to post Share on other sites More sharing options...
Staff miekiemoes Posted January 3, 2018 Staff ID:1196190 Share Posted January 3, 2018 Hi, I can't reproduce detection. Is this the exact same file you posted before? Or is it a different file? (maybe an update of that file). If the latter, can you zip and attach the file? Also, given this one triggers antiransomware behavior, it's a good idea to create an exclusion for the filepath, as I can see it will get detected again if it updates. Link to post Share on other sites More sharing options...
Albatross365 Posted January 3, 2018 Author ID:1196192 Share Posted January 3, 2018 It's the same file according to the filename, but I've attached just in case. Regards gene_pcim_v1.02_win64__fma.zip Link to post Share on other sites More sharing options...
Albatross365 Posted January 3, 2018 Author ID:1196193 Share Posted January 3, 2018 Scan log attached gene_pcim_report.txt Link to post Share on other sites More sharing options...
Staff miekiemoes Posted January 3, 2018 Staff ID:1196194 Share Posted January 3, 2018 Thanks. I can't reproduce detection on this one either, so unsure what is happening here. I would need more info for exact details, so can you zip and attach the MBAMService.LOG, this so I can have a look why it was detected. You can find this log in the following folder: C:\ProgramData\Malwarebytes\MBAMService\LOGS Thanks! Link to post Share on other sites More sharing options...
Albatross365 Posted January 3, 2018 Author ID:1196195 Share Posted January 3, 2018 Hi, Sorry for the confusion. It had detected something and I automatically assumed the first thing would be at the top. It was something else that was. Link to post Share on other sites More sharing options...
Staff miekiemoes Posted January 3, 2018 Staff ID:1196196 Share Posted January 3, 2018 Hmm, I was just looking at the previous log you attached and this is what it says: Protection Event Date: 11/2/17 Protection Event Time: 8:17 AM So this isn't the most recent log either. In either way, the mbamservice log will give some more insight. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now