Trend Micro antivirus software quarantines AYS software with a false positive

Trend Micro antivirus software may quarantine AYS software executable files with a false positive indicating the potential threat as Unauthorized File Encryption.

This issue apparently occurs when the “Ransomware Protection” settings are enabled under “Malware Behavior Settings” in the Trend Micro software. Other software companies have also reported similar false positives when this feature is enabled. To resolve this issue please try one of the following resolutions:

Resolution 1: The false positive was reported to Trend Micro in September 2019 (case ID 02429703) and on September 16, 2019 they classified AYS software as “certified safe” and “whitelisted.” Installing the latest Trend Micro software and virus list updates had resolved this issue.

However in December 2021 the software has again started to be quarantined with the same message. The false positive was reported to Trend Micro on December 20, 2021 and are awaiting their analysis and reply.

Resolution 2: Under “Behavior Monitoring Settings” select the “Exceptions” tab and add all files with the extension .exe from the folder C:\Program Files (x86)\At Your Service (or your installation folder) to the exceptions list.

Resolution 3: Under “Behavior Monitoring Settings” select the “Rules” tab and disable “Ransomware Protection” settings.