Author Topic: What does this ransomware alert mean?  (Read 1776 times)

0 Members and 1 Guest are viewing this topic.

Offline Saul5

  • Newbie
  • *
  • Posts: 3
What does this ransomware alert mean?
« on: October 11, 2023, 01:34:33 AM »
Any idea why I keep getting this alert message (see attachment)...

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88764
  • No support PMs thanks
Re: What does this ransomware alert mean?
« Reply #1 on: October 11, 2023, 02:02:48 AM »
Well the image begs the question are you trying to change or delete that .docx file  ?
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.1.6099 (build 24.1.8821.762) UI 1.0.796/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Saul5

  • Newbie
  • *
  • Posts: 3
Re: What does this ransomware alert mean?
« Reply #2 on: October 11, 2023, 08:07:09 AM »
No, this alert occurs on its own when just opening the file…it seems to happen with most docx files…very perplexing!

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88764
  • No support PMs thanks
Re: What does this ransomware alert mean?
« Reply #3 on: October 11, 2023, 11:14:04 AM »
No, this alert occurs on its own when just opening the file…it seems to happen with most docx files…very perplexing!

The biggest issue for me is I don't use a mac, so my Windows installation will differ.

I don't use the docx file format and whilst I have the Ransomware shield enabled pretty much the default settings and it is set to Smart and Choose File Types manually. I can't recall ever having alerts like this.  The other difference is I'm not using Avast One but Avast Antivirus Free, so the interface differs as does the configuration (why I stuck with Avast Antivirus Free for Windows).

Looking again at your image the action that is accessing the file and triggering the warning appears to be 'contentlinkingd' the bit at the end of the string. 
Is this file linked to something to check for changes ?
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.1.6099 (build 24.1.8821.762) UI 1.0.796/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Saul5

  • Newbie
  • *
  • Posts: 3
Re: What does this ransomware alert mean?
« Reply #4 on: October 14, 2023, 08:41:06 PM »
Nothing is being changed on these files upon opening (or at least it is not obvious). Perhaps Avast One just doesn't like Microsoft files due to their history of insecurity! When I do a complete Scan, no issue show up so I'll just ignore this glitch for now, and let's consider this thread put to bed;)