Jump to content
devicenull

Malwarebytes quarntines Backblaze executible as ransomware.

Recommended Posts

MalwareBytes is, I believe, incorrectly quarantining Backblaze's  (cloud backup software) transmit agent (bztransmit64.exe) as Malware.Ransom.Agent.Generic. I have attached the logs but not the executable as I re-installed the latest version of BackBlaze trying to fix the issue. It it decides to quarantine the new version, I will attache the new log and and the file in a subsequent post.

Thanks

backblaze.txt

Share this post


Link to post
Share on other sites

I would either need the file or the mbamservice.log

The mbamservice.log is located here:

C:\ProgramData\Malwarebytes\MBAMService\logs

Share this post


Link to post
Share on other sites

Here are the service logs. They appear to have rolled so I've included the last three to make sure the incident is in there. I was going to unquarantine the file and include it but apparently it blocked it and did not quarantine it. I then went to copy the current version to include and the file is 0 bytes....? Not sure how that happened. 

Temp.zip

Share this post


Link to post
Share on other sites

You would have to either shutdown and restart mbam to release the hold on the file. Or worse case reboot the machine.

Looking now.

 

Share this post


Link to post
Share on other sites

Thanks, it was a little disconcerting to have my off-site backup (I also do on-site backups) suddenly get reported as ransomware... LOL

 

 

Share this post


Link to post
Share on other sites

Yeah i could imagine.  When a program looks at a whole bunch of files quickly it can sometimes trip up the heuristic.

 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.