John_Liddle Posted July 25, 2018 ID:1258825 Share Posted July 25, 2018 Malwarebytes detected GedSite.exe as a Ransomeware threat and disabled it in such a way that Windows uninstall, although it runs, leaves the folder and .exe file behind. I cannot remove the file before re-installation of GedSite (which is an entirely innocent genealogy program). Although I am Administrator on the machine, it seem I lack the powers of the almighty needed to delete the program's folder, or the file within it. I have got round this by renaming the old folder (apparently I am sufficiently powerful for that), adding the program to the exclusions list and then re-installing GedSite. So now the drama shold be over, but why on earth did it occur? Log attached. False Positive (Advanced).txt Link to post Share on other sites More sharing options...
Staff shadowwar Posted July 25, 2018 Staff ID:1258827 Share Posted July 25, 2018 Can you please zip and attach this file here? GedSite.exe If you shutdown malwarebytes in this situation the lock would be released on the file. Link to post Share on other sites More sharing options...
John_Liddle Posted July 25, 2018 Author ID:1258841 Share Posted July 25, 2018 Thanks for the rapid response Rich. File attached. Regards, John Liddle GedSite.zip Link to post Share on other sites More sharing options...
Staff shadowwar Posted July 28, 2018 Staff ID:1259550 Share Posted July 28, 2018 Sorry for the delay. This should no longer be detected. Link to post Share on other sites More sharing options...
John_Liddle Posted July 30, 2018 Author ID:1260196 Share Posted July 30, 2018 Thank you Rich - I shall advise the program author. Link to post Share on other sites More sharing options...
Staff shadowwar Posted August 4, 2018 Staff ID:1261558 Share Posted August 4, 2018 If you are telling the author we strongly recommend digitally signing the files. This goes a long way with av heuristics in general to prevent fps with us and other companies. Link to post Share on other sites More sharing options...
leo3487 Posted August 5, 2018 ID:1261655 Share Posted August 5, 2018 Digitally signing.... it mean by a recognized AC, then pay a fee? Link to post Share on other sites More sharing options...
Staff shadowwar Posted August 6, 2018 Staff ID:1261800 Share Posted August 6, 2018 I believe that is how it works. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now