Jump to content

malware.ransom.agent.generic c:\$WINDOWS.BT\Sources\SetupHost.exe


Recommended Posts

trying to update to Windows 10 1903 at get this every attempt and update fails.

malware.ransom.agent.generic c:\$WINDOWS.BT\Sources\SetupHost.exe

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 9/17/19
Protection Event Time: 4:23 PM
Log File: 1a59944a-d9a2-11e9-8c40-3052cb8288ac.json

-Software Information-
Version: 3.8.3.2965
Components Version: 1.0.625
Update Package Version: 1.0.12529
License: Premium

-System Information-
OS: Windows 10 (Build 17134.1006)
CPU: x64
File System: NTFS
User: System

-Ransomware Details-
File: 1
Malware.Ransom.Agent.Generic, C:\$WINDOWS.~BT\Sources\SetupHost.exe, Quarantined, [0], [392685],0.0.0


(end)

 

 

 

 

Link to post
Share on other sites

Hi @mrboonmee - can you please attach these logs
C:\ProgramData\Malwarebytes\MBAMService\ArwDetections\1a59944a-d9a2-11e9-8c40-3052cb8288ac.json

C:\ProgramData\Malwarebytes\MBAMService\Logs\MBAMService.log

Thanks. As an interim solution, you could temporarily disable the Ransomware Protection module so you can complete your Windows 10 upgrade.

Or, add this folder to your Exclusions:
C:\$WINDOWS.~BT\Sources  (note, that is a hidden system folder)

Link to post
Share on other sites

Thanks for the logs. This is definitely a false positive. We're aware of a code issue which is causing this type of false positive and are working on devising a solution.

For now, the workaround would be as I suggested in my previous post. Disable Ransomware Protection temporarily, or add an Exclusion for this file.

C:\$WINDOWS.~BT\Sources\SetupHost.exe

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.