Pawel15 0 Posted February 9, 2023 Share Posted February 9, 2023 Hello! Has anyone encountered such a problem. We start getting "Ransomnote behavioral detection - filecoders [C0619]" alerts. This applies to "%LOCALAPPDATA%\microsoft\onedrive\23.020.0125.0003\kfmlockedfiletoast.png". Is it false positive? Regards! Link to comment Share on other sites More sharing options...
Administrators Marcos 5,257 Posted February 9, 2023 Administrators Share Posted February 9, 2023 This is because of writing to or renaming a file with the png extension and "locked" AND "file" substring in the file's name. I'd recommend creating an exclusion for the onedrive folder if you often use files with such name. Link to comment Share on other sites More sharing options...
Recommended Posts