Jump to content

Recommended Posts

Posted

Hello!
Has anyone encountered such a problem. We start getting "Ransomnote behavioral detection - filecoders [C0619]" alerts. This applies to "%LOCALAPPDATA%\microsoft\onedrive\23.020.0125.0003\kfmlockedfiletoast.png". Is it false positive?
Regards!

  • Administrators
Posted

This is because of writing to or renaming a file with the png extension and "locked" AND "file" substring in the file's name. I'd recommend creating an exclusion for the onedrive folder if you often use files with such name.

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...