MBAM kills "Farbar Recovery Scan Tool" (FRST)

[MKDB]

Hi,

 

during a FRST-fix, MBAM interfeared and put FRST into Quarantine. 👎 😉

The FRST-Fix that I've used can be found here.

 

MBAM logfile:

Spoiler

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Datum des Schutzereignisses: 28.04.21
Uhrzeit des Schutzereignisses: 15:06
Protokolldatei: 7a8b17a8-a822-11eb-878f-54e1addfda32.json

-Softwaredaten-
Version: 4.3.0.98
Komponentenversion: 1.0.1273
Version des Aktualisierungspakets: 1.0.39897
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 10 (Build 19041.928)
CPU: x64
Dateisystem: NTFS
Benutzer: System

-Einzelheiten zu Ransomware-
Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswert: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Datei: 1
Malware.Ransom.Agent.Generic, C:\Users\JMB\Downloads\FRST64.exe, In Quarantäne, 0, 392685, 0.0.0, aae2ca6abdad5590d64696ea05427265, 393f34a46e924f6193b600a6a91c7e4cd2d63c1331a021d3ade6d462df20aa4c

(end)

 

VT: https://www.virustotal.com/gui/file/393f34a46e924f6193b600a6a91c7e4cd2d63c1331a021d3ade6d462df20aa4c/detection

 

FRST64.exe in attachment.

 

Please update your generic detection in order to avoid the detection of FRST.

Thank you!

 

FRST64.zip

[Porthos]

I am thinking the user you were assisting lost connection to the cloud whitelisting at the time they ran the fix. I could be mistaken though.

[TwinHeadedEagle]

Thank you @MKDB We will implement a permanent fix now for future versions. This one is already whitelisted.

Edited April 28, 2021 by TwinHeadedEagle

[MKDB]

Thank you both for your fast answers.