Reply to thread

Message

<blockquote data-quote="MacDefender" data-source="post: 844139" data-attributes="member: 83059">File by file, KIS complained too about it and even offered to roll back the changes that the app did![ATTACH]229574[/ATTACH]Meanwhile in ESET-land..... <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite111" alt=":(" title="Frown&nbsp; &nbsp; :(" loading="lazy" data-shortname=":(" />[ATTACH]229575[/ATTACH]At this point I don&#039;t know how much more blatantly ransomware-y this could get. This is pretty much what ransomware fundamentally does.(F-Secure calls it Trojan:W32/CryptoRansomwareBehavior.B!DeepGuard, leaves behind 1 .encrypted file, but was blocked from deleting the original copy... Even if I disable the &quot;Ransomware Protection&quot; or remove My Documents from the protected directories list, DeepGuard still triggers, suggesting it&#039;s more than just blocking any access to My Documents)</blockquote>

[QUOTE="MacDefender, post: 844139, member: 83059"] File by file, KIS complained too about it and even offered to roll back the changes that the app did! [ATTACH alt="kis_crypto.png"]229574[/ATTACH] Meanwhile in ESET-land..... :( [ATTACH alt="eset.png"]229575[/ATTACH] At this point I don't know how much more blatantly ransomware-y this could get. This is pretty much what ransomware fundamentally does. (F-Secure calls it Trojan:W32/CryptoRansomwareBehavior.B!DeepGuard, leaves behind 1 .encrypted file, but was blocked from deleting the original copy... Even if I disable the "Ransomware Protection" or remove My Documents from the protected directories list, DeepGuard still triggers, suggesting it's more than just blocking any access to My Documents) [/QUOTE]

Verification