Pawel15 0 Posted February 9 Share Posted February 9 Hello! Has anyone encountered such a problem. We start getting "Ransomnote behavioral detection - filecoders [C0619]" alerts. This applies to "%LOCALAPPDATA%\microsoft\onedrive\23.020.0125.0003\kfmlockedfiletoast.png". Is it false positive? Regards! Link to comment Share on other sites More sharing options...
Administrators Marcos 4,935 Posted February 9 Administrators Share Posted February 9 This is because of writing to or renaming a file with the png extension and "locked" AND "file" substring in the file's name. I'd recommend creating an exclusion for the onedrive folder if you often use files with such name. Link to comment Share on other sites More sharing options...
Recommended Posts