Skip to main content
Participant
February 18, 2021
Answered

Adobe files flagged in ransomware injection warming

  • February 18, 2021
  • 4 replies
  • 3511 views

Hi folks,

 

For the past week, I've been getting warnings from Acronis Active Protection about an Injection Process within Node.exe that affects 28 files. All of these are .json files in ..\AppData\Raomain\Adobe\... 

 

I'm offered to stop the process (node.exe). I've selected that once, and chosen to ignored it at other times. But the warnings keep coming, typically after a reboot. 

 

Any idea what's up?

This topic has been closed for replies.
Correct answer Peru Bob

Report the false positive to Acronis:

https://kb.acronis.com/content/57216

4 replies

Participant
November 28, 2021

I get the same warning. How can I be sure, it is harmless and I can ignore it?

Participant
April 10, 2021

Same issue here

 

Participant
April 4, 2021

I too have been getting that warning.
The affected files are always those same adobe files.

Peru Bob
Community Expert
Peru BobCommunity ExpertCorrect answer
Community Expert
February 18, 2021

Report the false positive to Acronis:

https://kb.acronis.com/content/57216

Participant
April 4, 2021

Hi Peru Bob.
Are you confirming that it is a false positive?

Thanks,
Paul

Peru Bob
Community Expert
Community Expert
April 4, 2021

Yes.