Yes, they are not working exactly the same but maybe some functionality that they are providing can interfere with each other somehow. I think you have already found a conflict, the MBR protection
Hi Mood One of my systems has AppCheck with MBR protection on, and I can image (using Macrium Reflect 7 Free) quite happily! SO suspect that this has something to do with RansomFree rather than AppCheck Regards, Baldrick
The missing link is that you don't have RansomFree installed Running them both at the same time seems leading to issues. But i don't have problems with AppCheck until now. It is running fine
Did you read about CARB at the website? CheckMAL even has a brochure about AppCheck explaining what CARB is.
You're welcome. Btw it's CARB, all capitals. It's an acronym for Context-Awareness Ransomware Behavior, just fyi.
During this time encrypt 8-10 files. But protect MBR. RansomFree https://www.wilderssecurity.com/threads/ransomfree-by-cybereason.390786/page-15#post-2738757 works instantly, but does not protect MBR. But in next version will added protect MBR.
You have, but you do not know about it! 10sec- in virtual machine! In the real machine will be twice as fast, I think.
I wonder why you have it unticked. It happened out of no where or you just did it on purpose? That feature (Ransomware Protective Shelter) is used by AppCheck to temporarily save any file(s) as a backup, from monitored drives. If a crypto-ransomware happened to run on your system and started to encrypt files, AppCheck, while is analyzing its behavior and deciding whether is a bad or good behavior, it is saving a clean copy of the files into that Protective Shelter, restoring them to its original directory after AC stopped the crypto-ransomware. In short, you must keep that feature on!
>> on purpose! ? Which files are you talking about ? : there is my problem. So far I have not seen any logic in the choice of the files who become protected. Appcheck loves protecting my mail files, which are on a separate partition. But suddenly these files are copied on my C: partition -in the special Appcheck folder- (my C:\ contains Win and prog), this has no sense for me.
I have 5 .pst files. Why only 2 (or 3, I do not remember) of them were backupped? Why on my C: drive, which inflated brutally (I have gigs of mails on a separate partition)? I have a bunch of . doc . Some of them (just a few actually) were 'sheltered'; why them??