False Positive for Home grown app

[scoutt]

We have a few apps that we wrote that have been in use forever. For the past week we have one of them being blocked by Anti-Ransomware. I have tried the policy exception but we run it from a network path and that is not allowed in the policy. What do I need to get it added to the database to allow it?

[scoutt]

I think we have it handled, we digitally signed it and we think it has corrected the false positive. Time will tell

[scoutt]

Well that didn't stop it. Still getting false positives.

[exile360]

Greetings,

Thank you for reporting this.  If you would, please provide a copy of the protection log showing the detection to aid Research in correcting the FP.

Thanks

[scoutt]

Hi exile, kindly remind where where that is?

[scoutt]

I have sent you a PM

 

Thank you

[exile360]

I am not a member of Research; you will need to post the log here as an attachment for the Research team to be able to correct the false positive.

Thanks

 

[scoutt]

Thanks exile, here it is.

MBAM_LOG_FILE_1-39PM.txt

[exile360]

Thanks, a member of Research should respond once they've had a chance to review the detection log.

[scoutt]

Hi Exile,

Any news on this?  It usually doesn't take this long.

[scoutt]

Oh, I just noticed you moved it, this is not a home product, we have the business install. Should I create a ticket instead?

[scoutt]

Ticket has been created.

Thanks Exile

[exile360]

Sorry about that; I didn't realize it was for the business product, however a member of Research should be able to address the FP either way.

@cli would you please take a look when you have a chance?

Thanks

[scoutt]

Thanks Exile, research has already found that it was the windows 2004 update causing grief. We may have a fix, still testing, but so far so good

[cli]

That's good to hear. Let us know if anything changes.

[exile360]

Excellent, I'm glad to hear it.  Thanks for the update.