Antivirius reporting Ransomware Blocked

[HC3]

Using Trend Micro Maximum Security version 12.0.1226 with all the latest component updates.

Getting the following report after updating with Aslains _WoT_Modpack_Installer_v.1.1.0_07

 

Ransomware Program Blocked

 

A suspicious program modified or encrypted your files.

Trend Micro Maximum Security stopped it for your protection.

Trend Micro Maximum Security successfully recovered all the changed files. Your files are safe.

 

Name:    aslains_wot_modpack_installer_v.1.1.0_07.exe
From:    Aslain
Version:    0.1.1.0.07
Copyright:    Aslain
Detected Resource or Process ID:    c:\users\xxxxxxxxxxxxxxxx\aslains_xvm_wot_modpack_installer
\aslains_wot_modpack_installer_v.1.1.0_07.exe
Response:    Terminated
Changed Files:    
battle_popup.png
battleswords.png
01_karelia.png
02_malinovka.png
03_campania_big.png
04_himmelsdorf.png
05_prohorovka.png
06_ensk.png
china-ch01_type59.png
china-ch02_type62.png
china-ch03_wz-111.png

 

Just informing you so you can check it out.

Thank You

 

 

 

[Quaksen]

Looks like it's just braindead antivirus software that things it's a bad thing, since multiple files are being changed at the same time.. you can see the list of "changed files"...

[HC3]

Could very well be Quaksen, but I just wanted Aslain to know, never hurts to report what you see might help some day.

[Quaksen]

Sorry about the typo I made too, but I'm sure you understood, hehe.

 

The antivirus isn't braindead as such - it's just the "ransomware" detection that looks for multiple files changing at once - and Aslain's modpack changes multiple files at once.

 

There's nothing scary here - just your protection software being a little too protective in this case  You can probably add the modpack as exclusion - it's not something Aslain can fix - he cannot change how your antivirus detects using heuristics

[HC3]

rather have my antivirus too protective than let some nasty get in, and i'v had the modpack as an exclusion for over 3 years but it still detects it, no problem  i'll ask the antiv company how to fix it. And i know Aslain can't fix the antivirus program if he could he'd be making big bucks. just informing him of what's going on. :-)

 

And thanking him for all the hard work he does.

[Quaksen]

Hehe of course

Just in cases like this, you'll need to work around it

 

I think someone else mentioned it at some point too, that their "ransomware protection" was freaking out too - and it makes total sense why it happens.

 

You should be able to exclude the modpack file in your antivirus software