Portals desktop organizer

[tmneff]

Hi - Malwarebtyes is tagging Ross Patterson's desktop organizer Portals ( https://portals-app.com/ ) with Malware.Ransom.Agent.Generic and quarantining it.  I have been using it for years and see no evidence that it's become ransomware. 

Also, when I use the Support Tool to gather logs, it finishes and pops up saying "mbst-grab-results.zip can be found on your desktop..." but in fact this file is saved in the Public desktop ( C:\Users\Public\Desktop\ ) for some reason.  Another copy is in my user's AppData under Local\Temp\mwb96A.tmp .  Anyway...

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 6/17/2024
Protection Event Time: 8:39 AM
Log File: 9b479fdc-2ca6-11ef-ae3c-f4c88a89fbc4.json

-Software Information-
Version: 5.1.5.116
Components Version: 1.0.1252
Update Package Version: 1.0.85976
License: Premium

-System Information-
OS: Windows 11 (Build 22635.3785)
CPU: x64
File System: NTFS
User: System

-Ransomware Details-
Registry Key: 0
(No malicious items detected)

Registry Value: 1
Malware.Ransom.Agent.Generic, HKU\S-1-5-21-1121057101-4081529894-977509712-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Portals, Quarantined, 0, 392685, 0.0.0, ,

Registry Data: 0
(No malicious items detected)mbst-grab-results.zip

File: 3
Malware.Ransom.Agent.Generic, C:\Program Files\Portals\Portals.exe, Quarantined, 0, 392685, 0.0.0, 865990b49bd0c1202f2db9a6590b3dcf, 74b1f1304eff5c989c5e9ade13e8d26b9120553e2bcd8372227be348f10e392a
Malware.Ransom.Agent.Generic, C:\DOCUMENTS AND SETTINGS\PUBLIC\Desktop\Portals.lnk, Quarantined, 0, 392685, 0.0.0, ,
Malware.Ransom.Agent.Generic, C:\PROGRAMDATA\Microsoft\Windows\Start Menu\Programs\Portals.lnk, Quarantined, 0, 392685, 0.0.0, ,

(end)

 

[cli]

Thanks for reporting this should be fixed in 10 minutes.