Metal Gear Rising Ransomware False Positive

[pieguy98]

Malwarebytes locked up my game when it detected it as ransomware. Any way for me to get permissions back to my exe? As it is now I can't even delete it let alone open it. I've attached the log file.

false positive.txt

[tetonbob]

Hi @pieguy98-

To regain access to your file, you need only disable the Ransomware Protection temporarily, then re-enable it.

To help the Research Team address this false positive, please provide a copy of the file itself, or the MBAMService.log located at C:\ProgramData\Malwarebytes\MBAMService\logs

[pieguy98]

Thanks. Here's the exe and the log file.

MBAM log and false positive exe.rar

[miekiemoes]

Hi,

Thanks for the log. 

Our Antiransomware engine triggered this file as suspicious, but since it couldn't do additional checkups in the cloud (probably because there was a temporary internet connection issue on your end), it couldn't make a final determination on the file, so for safety sake, it just killed the running process. It didn't delete the file.

Normally, this file won't be detected when it could do the additional checkups in the cloud. So if this happens again, I suggest that you add an exclusion for this file for the Antiransomware engine.

 

* To add the exclusion, open Malwarebytes > Settings > Exclusions tab

* Below, click the button: "Add Exclusion"

* Then, select "Exclude a File or Folder" (this should be prechecked already by default)

* Click Next

* You'll see a field that says: "Specify a File or Folder" - there, click the button "Select Files..." and browse to the file you want to exclude. In your case: 

D:\SteamLibrary\steamapps\common\METAL GEAR RISING REVENGEANCE\METAL GEAR RISING REVENGEANCE.exe

 

* For "How to Exclude", select: "Exclude from detection as malware, ransomware or potentially unwanted item" (this is normally also selected by default already)

* Then click the OK button below.