OldMainframeGuy Posted March 11, 2022 ID:1506374 Share Posted March 11, 2022 Today I upgraded DuplicateCleaner5 from version 5.0.13 to 5.14 and when I used its 'delete duplicate files' feature Malwarebytes intervened to prevent a ransomware attack - "Malware.Ransom.Agent.Generic". I uninstalled the new version and reinstalled the old and everything is OK right now. I'm thinking this is a false positive since it was downloaded directly from the publisher's site. https://www.digitalvolcano.co.uk/duplicatecleaner.html I also posted this on Digital Volcano's support forum. Rob Link to post Share on other sites More sharing options...
Staff cli Posted March 11, 2022 Staff ID:1506383 Share Posted March 11, 2022 Thanks for reporting. Do you have a log and the file that was detected? Link to post Share on other sites More sharing options...
OldMainframeGuy Posted March 12, 2022 Author ID:1506393 Share Posted March 12, 2022 I reinstalled the previous version of the program so I don't currently have the one that tripped the ransomware alert. Which log file are you looking for? Rob Link to post Share on other sites More sharing options...
Staff cli Posted March 12, 2022 Staff ID:1506394 Share Posted March 12, 2022 Please attach the logs from following the directions in Upload Malwarebytes Support Tool logs offline. Thanks. Link to post Share on other sites More sharing options...
OldMainframeGuy Posted March 12, 2022 Author ID:1506399 Share Posted March 12, 2022 (edited) Logs attached. Since I originally posted this I updated MB ("Check for update") and re-installed the newer version of DuplicateCleaner5. I am no longer getting the ransomware alert. This was the text from the original alert: Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 3/11/22 Protection Event Time: 2:58 PM Log File: 9b5beb04-a175-11ec-bfc0-fc3497a11518.json -Software Information- Version: 4.5.5.175 Components Version: 1.0.1621 Update Package Version: 1.0.52195 License: Premium -System Information- OS: Windows 10 (Build 19044.1586) CPU: x64 File System: NTFS User: System -Ransomware Details- Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) File: 1 Malware.Ransom.Agent.Generic, C:\Program Files (x86)\Duplicate Cleaner 5\Duplicate Cleaner 5.exe, Quarantined, 0, 392685, 0.0.0, 8acec432cbc01bcf00ab9c3f1990a5d8, 0c2175649ac0ddd85f7bf14f70ae994e4209a855d85d6aedc12096e321f65830 (end) I hope this helps! Rob mbst-grab-results.zip Edited March 12, 2022 by OldMainframeGuy Link to post Share on other sites More sharing options...
Staff cli Posted March 12, 2022 Staff ID:1506402 Share Posted March 12, 2022 Thanks, it's been whitelisted. Link to post Share on other sites More sharing options...
OldMainframeGuy Posted March 21, 2022 Author ID:1507905 Share Posted March 21, 2022 After updating to version 4.5.6, Malwarebytes is again flagging DuplicateCleaner5 as ransomware. Can something be done about this please? mbst-grab-results.zip Link to post Share on other sites More sharing options...
Staff cli Posted March 21, 2022 Staff ID:1507924 Share Posted March 21, 2022 Thanks for reporting back, I applied a different fix this time. Please let me know if you see the detections again. Link to post Share on other sites More sharing options...
OldMainframeGuy Posted March 21, 2022 Author ID:1507935 Share Posted March 21, 2022 Cli: I rebooted, updated Malwarebytes, restored the quarantined program and retested and all is well. Thanks for the quick resolution. If it's any help, when Malwarebytes flags the program as ransomware, it's at the time when I click on "Delete the files" (e.g. delete the files I've marked as duplicates). Rob Link to post Share on other sites More sharing options...
Staff cli Posted March 21, 2022 Staff ID:1507936 Share Posted March 21, 2022 I see. Thanks for the information and reporting back. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now