Hydrus Client

[tronikart]

Hydrus Client v411

https://github.com/hydrusnetwork/hydrus/releases/tag/v411

was falsely detected as ransomware, it was irreversibly removed and was forced to restart, lost 3 years of work :) thx for the panic attack <3

Edited September 14, 2022 by AdvancedSetup
Disabled live hyperlink

[Porthos]

Could you post the log showing the detection.

You can find Scan and Protection logs within the Malwarebytes 4 program in the following location

 

 

RTP stands for Real-Time Protection and is where automatic protection operations would normally be logged

 

 

If you click on the View option you should get something similar to the following with other options available.

 

 

 

 

Thank you

Edited September 14, 2022 by AdvancedSetup
Removed quote

[tronikart]

3 hours ago, Porthos said:

Could you post the log showing the detection.

You can find Scan and Protection logs within the Malwarebytes 4 program in the following location

 

 

RTP stands for Real-Time Protection and is where automatic protection operations would normally be logged

 

 

If you click on the View option you should get something similar to the following with other options available.

 

 

 

 

Thank you

 

Here it is:

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 9/13/22
Protection Event Time: 3:20 PM
Log File: 84d1857e-33a1-11ed-84cd-18c04da015a4.json

-Software Information-
Version: 4.5.14.210
Components Version: 1.0.1751
Update Package Version: 1.0.60013
License: Premium

-System Information-
OS: Windows 10 (Build 19044.1949)
CPU: x64
File System: NTFS
User: System

-Ransomware Details-
Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

File: 2
Malware.Ransom.Agent.Generic, C:\PROGRAMDATA\Microsoft\Windows\Start Menu\Programs\Hydrus Client.lnk, Quarantined, 0, 392685, , , 
Malware.Ransom.Agent.Generic, I:\Hydrus Network\client.exe, Quarantined, 0, 392685, 0.0.0, d489fc69997ea218b911a79544df55bd, 974c28025a6f1964cd1d11141a404799c74b626001b9aa9a6fc504a4f0b3d82a


(end)

 

[Porthos]

13 minutes ago, tronikart said:

File: 2
Malware.Ransom.Agent.Generic, C:\PROGRAMDATA\Microsoft\Windows\Start Menu\Programs\Hydrus Client.lnk, Quarantined, 0, 392685, , , 
Malware.Ransom.Agent.Generic, I:\Hydrus Network\client.exe, Quarantined, 0, 392685, 0.0.0, d489fc69997ea218b911a79544df55bd, 974c28025a6f1964cd1d11141a404799c74b626001b9aa9a6fc504a4f0b3d82a

You should be able to restore the 2 files that were quarantined and add them to exclusions.

6 hours ago, tronikart said:

lost 3 years of work

I do not understand this comment so I can not advise on that.

Edited September 14, 2022 by Porthos

[miekiemoes]

Hi,

This has been whitelisted already and should no longer be detected anymore.