Jump to content

Metal Gear Rising Ransomware False Positive

Recommended Posts

Hi @pieguy98-

To regain access to your file, you need only disable the Ransomware Protection temporarily, then re-enable it.

To help the Research Team address this false positive, please provide a copy of the file itself, or the MBAMService.log located at C:\ProgramData\Malwarebytes\MBAMService\logs

Link to post
Share on other sites


Thanks for the log. 

Our Antiransomware engine triggered this file as suspicious, but since it couldn't do additional checkups in the cloud (probably because there was a temporary internet connection issue on your end), it couldn't make a final determination on the file, so for safety sake, it just killed the running process. It didn't delete the file.

Normally, this file won't be detected when it could do the additional checkups in the cloud. So if this happens again, I suggest that you add an exclusion for this file for the Antiransomware engine.


* To add the exclusion, open Malwarebytes > Settings > Exclusions tab

* Below, click the button: "Add Exclusion"

* Then, select "Exclude a File or Folder" (this should be prechecked already by default)

* Click Next

* You'll see a field that says: "Specify a File or Folder" - there, click the button "Select Files..." and browse to the file you want to exclude. In your case: 



* For "How to Exclude", select: "Exclude from detection as malware, ransomware or potentially unwanted item" (this is normally also selected by default already)

* Then click the OK button below.


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.