# Malwarebytes quarantined local.exe and local.lnk **URL:** \ **Category:** Support\ **Created:** [April 2, 2020, 6:44pm UTC](https://community.localwp.com/t/malwarebytes-quarantined-local-exe-and-local-lnk/18418 "2020-04-02T18:44:00Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![MickG](https://avatars.discourse-cdn.com/v4/letter/m/dbc845/32.png) [@MickG](https://community.localwp.com/u/MickG)\ **Post date:** [April 2, 2020, 6:44pm UTC](https://community.localwp.com/t/malwarebytes-quarantined-local-exe-and-local-lnk/18418/1 "2020-04-02T18:44:00Z")
Hi Support, I updated to the new version of local this morning and while I was working on flywheel today, Malwarebytes quarantined the local.exe and the local.lnk files as ransomware. Both were flagged as: Malware.Ransom.Agent.Generic. > **[Malware.Ransom.Agent.Generic - Malwarebytes Labs](https://blog.malwarebytes.com/detections/malware-ransom-agent-generic/)** > > Malware.Ransom.Agent.Generic is Malwarebytes' generic detection name for files that are detected by the Malwarebytes Anti-Ransomware module as unknown malware that displays characteristics of ransomware. Event: RTP detection Is this a false positive? I am concerned about restoring the files until I am sure. Here is the log details: Malwarebytes > **[Malwarebytes Cybersecurity for Home and Business](https://www.malwarebytes.com/)** > > Malwarebytes protects you against malware, ransomware, malicious websites, and other advanced online threats that have made traditional antivirus obsolete and ineffective. Download Malwarebytes for free and secure your PC, Mac, Android, and iOS. -Log Details- Protection Event Date: 4/2/20 Protection Event Time: 1:50 PM Log File: 65a620f4-750a-11ea-80d6-c07cd1fced85.json -Software Information- Version: 4.1.0.56 Components Version: 1.0.859 Update Package Version: 1.0.21794 License: Premium -System Information- OS: Windows 10 (Build 18362.720) CPU: x64 File System: NTFS User: System -Ransomware Details- File: 2 Malware.Ransom.Agent.Generic, C:\Users\Mick\Desktop\Local.lnk, Quarantined, 0, 392685, 0.0.0 Malware.Ransom.Agent.Generic, C:\Users\Mick\AppData\Local\Programs\Local\Local.exe, Quarantined, 0, 392685, 0.0.0 Thanks mick ---
**Author:** ![clay](https://sea1.discourse-cdn.com/flex019/user_avatar/community.localwp.com/clay/32/8248_2.png) [@clay](https://community.localwp.com/u/clay)\ **Post date:** [April 3, 2020, 4:56pm UTC](https://community.localwp.com/t/malwarebytes-quarantined-local-exe-and-local-lnk/18418/2 "2020-04-03T16:56:18Z")
Hi Mick, Thanks for the report! I just scanned 5.2.8 with VirusTotal and Malwarebytes appears to be fine there. Here is a link to the results: [https://www.virustotal.com/gui/file/246110fbccbd0f46ecac5370d36e9bf08030ab3bfab7e6744d0447819b95eb53/detection](https://www.virustotal.com/gui/file/246110fbccbd0f46ecac5370d36e9bf08030ab3bfab7e6744d0447819b95eb53/detection) If you continue to get a report in Malwarebytes, please verify that you’re downloading Local from [https://localwp.com](https://localwp.com). ---
**Author:** ![MickG](https://avatars.discourse-cdn.com/v4/letter/m/dbc845/32.png) [@MickG](https://community.localwp.com/u/MickG)\ **Post date:** [April 3, 2020, 5:43pm UTC](https://community.localwp.com/t/malwarebytes-quarantined-local-exe-and-local-lnk/18418/3 "2020-04-03T17:43:53Z")
Hi Clay Thanks for the update. I originally downloaded Local in October and have been been using it the past few months and it has been fine. Yesterday there was a notice in the software that a new version was available so I updated it. Within a few minutes Malwarebytes quarantined those two files. I am reluctant to release them from quarantine. Is there anything else I can check? If I uninstall and reinstall the software, what is the best way to retain the site? Thanks! Mick ---
**Author:** ![greggdavis](https://sea1.discourse-cdn.com/flex019/user_avatar/community.localwp.com/greggdavis/32/4437_2.png) [@greggdavis](https://community.localwp.com/u/greggdavis)\ **Post date:** [April 12, 2020, 4:20pm UTC](https://community.localwp.com/t/malwarebytes-quarantined-local-exe-and-local-lnk/18418/4 "2020-04-12T16:20:08Z")
I’m having the same files quarantined with MalwareBytes. It happens when I try to update WordPress or plugins on any local sites. Now when I uninstall and reinstall 5.2.8, it won’t run. Nothing happens. ---
**Author:** ![auggie1st](https://avatars.discourse-cdn.com/v4/letter/a/c4cdca/32.png) [@auggie1st](https://community.localwp.com/u/auggie1st)\ **Post date:** [April 21, 2020, 11:49pm UTC](https://community.localwp.com/t/malwarebytes-quarantined-local-exe-and-local-lnk/18418/5 "2020-04-21T23:49:20Z")
A few weeks ago, I decided to experiment with Local Lighting. I downloaded Local.exe from trusted site [https://localwp.com](https://localwp.com) version 5.2.8 +2771 and started creating my local site. Today my favorite program Malwarebytes Premium quarantined the local.exe as ransomware. I released it from quarantine and continued to use it. No damage had been found by me except the program shortcut at the desktop was disappeared. But who knows what I’ll face in the future? Dear Clay, ransomware is a form of malware that locks you out of your device and/or encrypts your files, then forces you to pay a ransom to get them back. Ransomware can reach systems in many ways from infected email attachments to targeted attacks on RDP ports. Do not underestimate it. You know it better than me as Product Architect, Developer Experience and so on. Fix it. Something is not legal probably in user account control (Windows common processor(?). Otherwise Local Lighting has no future on the market. ---
**Author:** ![Webtica](https://avatars.discourse-cdn.com/v4/letter/w/bbe5ce/32.png) [@Webtica](https://community.localwp.com/u/Webtica)\ **Post date:** [April 26, 2020, 6:02pm UTC](https://community.localwp.com/t/malwarebytes-quarantined-local-exe-and-local-lnk/18418/6 "2020-04-26T18:02:39Z")
Having the same issue here with latest local and latest malwarebytes. 🙂 ---
**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/community.localwp.com/system/32/1_2.png) [@system](https://community.localwp.com/u/system)\ **Post date:** [July 25, 2020, 6:02pm UTC](https://community.localwp.com/t/malwarebytes-quarantined-local-exe-and-local-lnk/18418/7 "2020-07-25T18:02:39Z")
This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.