CSProf Posted March 21, 2018 ID:1225981 Share Posted March 21, 2018 So, I keep getting reports about ransomware regarding mv.exe from the cygwin linux tools distribution (which is then annoying deleted so I have to restore it). Here's the log info and mv.exe binary in a zip so y'all can check it out. Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 3/17/18 Protection Event Time: 5:24 PM Log File: 5c080fa2-2a3a-11e8-a5e2-a4173112e420.json Administrator: Yes -Software Information- Version: 3.3.1.2183 Components Version: 1.0.262 Update Package Version: 1.0.4396 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: System -Ransomware Details- File: 1 Malware.Ransom.Agent.Generic, c:\cygwin\bin\mv.exe, Delete-on-Reboot, [0], [392685],0.0.0 (end) mv.zip Link to post Share on other sites More sharing options...
Staff miekiemoes Posted March 21, 2018 Staff ID:1225982 Share Posted March 21, 2018 Thanks for reporting. This has been fixed already, so shouldn't be detected anymore. Link to post Share on other sites More sharing options...
CSProf Posted March 22, 2018 Author ID:1226451 Share Posted March 22, 2018 Great, thanks. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now