Microsoft Alert

[RodneyJ]

I installed CRYPTOMATOR yesterday and today added my first files to a Vault in my OneDrive directory.

Soon afterwards I received a message from Microsoft saying that they had detected signs of ransomeware on my OneDrive account and subsequently pointed out the encrypted files. Now I assume that it is the strange filenames and extensions that is triggering the alert, but I wondered if this is commonly encountered when using the software. I am using the 64-bit Home Edition of Windows 11.

Any advice would be appreciated.

[Michael]

Hi. Please see here:

OneDrive recognizes the crypted files as RansomWare with new Vault7

Hi, I’ve been doing some tests with the new Vault7 version and uploaded lots of files to Microsoft OneDrive. I constantly get automated mails from them that the files I’ve uploaded are possibly due to RansomWare as they look encrypted. Here’s the mail text in German though: Anzeichen von Ransomware erkannt. Hallo, Office365 verfügt über branchenführende Datenschutztechnologie, die nach Cyberangriffen auf Ihre Dateien Ausschau hält. Ihr OneDrive-Konto hat vor Kurzem begonnen, Anzeichen für v…

Onedrive Flags Cryptomator Files as Suspected Ransomware and Says They Will Delete in 30 Days

Soon after creating a Cryptomator Vault with MS Onedrive, I found myself locked out of my online Onedrive, my folder being replaced with a quite dramatic ‘you’ve probably been infected’ screen. I won’t bore the forum with the most frustrating of all Microsoft customer support ordeals over following days due to an account verification failure loop, but when I did ultimately gain access to the microsoft ransomware wizard, the sample files they provided as proof of this ransomware were Cryptomator…

OneDrive Ransomware Protection kills Cryptomator - please support!

Hi Folks, Microsoft OneDrive has a function called “Ransomware Protection”. This function checks all files in your cloud and forces you to regard files which where encrypted by 3rd party tools like Cryptomator. When you dismiss checking your (encrypted) files, they will be removed after 30 days! I have contacted Microsoft support. They told me, that this is a known issue which can’t be turned off. They also told me that there was an UserVoice feedback survey, which suggests to turn the Ranso…

So yes, you are not alone with this false detection by Microsoft. Please
Support the survey at Microsoft to disable this (linked post).

[bhuvanesh1972]

Am having the same problems with OneDrive and Crytomator files.
This problem does not seem to be there with DropBox - as i share cryptomator files with my workgroup
Maybe Cryptomator can embed a secret code which identifies the file and Microsoft can detect it !!