Why is my ransomware protection detecting fan-made Honey Select.exe as a threat?

[Yin Gee]

https://f95zone.to/threads/honey-select-v1-2-1-0-2-illusion.1317/post-2479353

The Fan-made 3.5 HoneySelect_64.exe warns my ransomware protection, but its only affecting card pngs. Is this normal? Its not affecting any other files, just downloaded character cards.

 

[Penumbral Evanescence]

https://f95zone.to/threads/honey-select-v1-2-1-0-2-illusion.1317/post-2479353

The Fan-made 3.5 HoneySelect_64.exe warns my ransomware protection, but its only affecting card pngs. Is this normal? Its not affecting any other files, just downloaded character cards.

It could be a false positive. Do you have a sample log that is being generated by your ransomware application with any additional details? I don't think there's an issue with the files (i.e., character cards themselves per-se) as they should have been tested appropriately prior to the files being uploaded onto the servers....

Btw, what ransomware protection are you using? I would say enable application whitelisting for the custom 3.5 HoneySelect_64.exe and see what happens then. If you are using Windows Defender,

You must be registered to see the links

.

 

[Yin Gee]

It could be a false positive. Do you have a sample log that is being generated by your ransomware application with any additional details? I don't think there's an issue with the files (i.e., character cards themselves per-se) as they should have been tested appropriately prior to the files being uploaded onto the servers....

Btw, what ransomware protection are you using? I would say enable application whitelisting for the custom 3.5 HoneySelect_64.exe and see what happens then. If you are using Windows Defender,

You must be registered to see the links

.

I’m using Acronis. I don’t know where to find it’s sample log. I’ll look it up and try to find it.

I’ll post some of the cards that the exe tried to modify to set it off. The three with simple interger names i downloaded from illisioncards.booru.org link in sources. the last is one of the ones already packed with the files.