Jump to content

Behavioral detection onedrivesetup.exe


Recommended Posts

Hello!
Has anyone encountered such a problem. We start getting "Ransomnote behavioral detection - filecoders [C0619]" alerts. This applies to "%LOCALAPPDATA%\microsoft\onedrive\23.020.0125.0003\kfmlockedfiletoast.png". Is it false positive?
Regards!

Link to comment
Share on other sites

  • Administrators

This is because of writing to or renaming a file with the png extension and "locked" AND "file" substring in the file's name. I'd recommend creating an exclusion for the onedrive folder if you often use files with such name.

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...