Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

mega[FP] #27

Open
mayziran opened this issue Jan 13, 2024 · 1 comment
Open

mega[FP] #27

mayziran opened this issue Jan 13, 2024 · 1 comment
Labels
false positive Some rules block sth shouldn't be blocked

Comments

@mayziran
Copy link

  • Win 版本号 Windows 11 专业版 22631.3007
  • 火绒版本号 5.0.75.1
  • 火绒日志 （打开火绒日志界面，选择对应日志，导出/复制粘贴到此处）
    触犯规则：Suspicious.RunFromSusPath.C
    操作类型：【执行】
    操作文件：C:\ProgramData\MEGAsync\MEGAupdater.exe
    操作结果：已允许

进程ID：2092
操作进程：C:\Windows\System32\svchost.exe
操作进程命令行：C:\Windows\system32\svchost.exe -k netsvcs -p -s Schedule
父进程ID：1476
父进程：C:\Windows\System32\services.exe
父进程命令行：C:\Windows\system32\services.exe

  • 截图 （可选）

  • 触发场景描述 （可选）平均一小时出现一次

  • Windows version

  • Huorong version

  • Huorong logs (open the Huorong log interface, select the corresponding logs, export/copy-paste them here)

  • Screenshots (optional)

  • Methods to reproduce the issue (optional)
@mayziran mayziran added the false positive Some rules block sth shouldn't be blocked label Jan 13, 2024
@mayziran mayziran changed the title [FP] mega[FP] Jan 13, 2024
@JerryLinLinLin
Copy link
Owner

支持 6.0 的时候解决

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
false positive Some rules block sth shouldn't be blocked
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@mayziran @JerryLinLinLin