Share via

Cryptomator files detected as ransomware

Anonymous
2023-08-01T14:14:50+00:00

Quite often when I put files through Cryptomator into OneDrive they are detected as ransomware. How can I prevent that? It is quite annoying and you need to go each time to Recycle Bin and restore them because they are automatically deleted now

Microsoft 365 and Office | OneDrive | For home | Other

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

9 answers

Sort by: Most helpful
  1. Anonymous
    2023-08-01T15:41:26+00:00

    yeah I know, the question is if there is any solution or even on the radar of Microsoft devs

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments
  2. Anonymous
    2023-08-01T15:13:03+00:00

    Image

    I am getting emails from Microsoft so this is OneDrive protection, not my software.

    I don't see option to disable Ransomware Protection, can you tell me again where it is. I am using Office 365 Personal on web

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments
  3. Anonymous
    2023-08-01T15:10:59+00:00

    Personal

    Was this answer helpful?

    0 comments No comments
  4. Anonymous
    2023-08-01T14:57:32+00:00

    Hi Kurak Welcome to Microsoft Community. I am a Microsoft user just like you, hope you are well.

    I understand that you're having trouble with OneDrive detecting your encrypted files as ransomware and automatically deleted, it could be due to the security settings in OneDrive or your antivirus software.

    Here are some steps you can take to prevent files from being flagged as ransomware:

    1. Whitelist Cryptomator and OneDrive: Add Cryptomator and the OneDrive sync folder to the exclusion list of your antivirus or ransomware protection software. This will prevent the security software from scanning and flagging files within these folders.
    2. Disable OneDrive's ransomware protection. This will allow you to upload your encrypted files without them being detected as ransomware. To do this, open OneDrive and go to the "Settings" tab. Then, click on the "Ransomware Protection" section and uncheck the "Enable ransomware protection" checkbox.
    3. Change the file extension of your encrypted files. When you encrypt a file with Cryptomator, it will be given a new file extension. You can change this file extension to something else, such as ".txt" or ".jpg". This will prevent OneDrive from detecting your encrypted files as ransomware.
    4. Temporarily Disable Security Software: As a temporary troubleshooting step, you can try disabling your antivirus.
    5. Check OneDrive Activity Logs: Check the OneDrive activity logs or security reports to see if there are any specific events related to the deleted files. This might provide more insight into the reason for the deletion.

    Remember that modifying security settings and excluding folders from scans may decrease your system's security, so only make changes if you are confident about the safety of your files and the tools you are using.

    Thank you for allowing me to assist you today. If you could let me know if we have answered your questions or if there is something else, we can assist you with.

    Best Regards, Umar

    Was this answer helpful?

    0 comments No comments
  5. Dillon Silzer 60,931 Reputation points
    2023-08-01T14:41:35+00:00

    Is this OneDrive personal or business?

    Was this answer helpful?

    0 comments No comments