False positive

Acronis Cyber Protect: Dentrix software is flagged as suspicious by Active Protection

Symptoms

  1. Machine is running Dentrix software,
  2. You receive false-positive alerts from Acronis Active Protection:

    Suspicious activity is detected
    On machine 'machine name', injection process within program '...\DENTRIX\...' modified file. The process has been stopped, and the file changes have been reverted.

Cause

The behavior is by design. 

Dentrix software is being monitored by Active Protection because it does not have a valid signature.

Acronis Cyber Protect: How to set up exclusion settings if processes have no exact path

Symptoms

  • User receives a false positive alert about a suspicious process from Active Protection,
  • You want to exclude the process from Active Protection (add it to Trusted processes), but there is no exact path for exclusion: e.g. the process has a new name or a new location by each run. Exclusion of the whole folder where the process is located does not help.

Cause

Acronis Cyber Protect Home Office, Acronis Cyber Protect: How to report False Positive and False Negative cases

Why do I have a false detection?

With Acronis Cyber Protect Home Office, Acronis Cyber Protect you gain real-time protection with AI-based static and behavioral heuristic antivirus, antimalware, antiransomware, and anticryptojacking technologies. It means that it uses heuristics and analyzes software behavior, rather than relies on signatures only.