Factorio Forums

Posted: **Thu Jul 07, 2016 3:44 am**

Factorio was auto saving when Trend closed it and said it was ransomware.

Name: factorio.exe
From: Unknown
Version:
Copyright:
Detected Resource or Process ID: c:\program files (x86)\steam\steamapps\common\factorio\bin\x64\factorio.exe
Response: Terminated
Changed Files:
preview.png
_autosave2.zip
_autosave2.tmp.zgdr.zip

Not sure if this is a bug or not.

Posted: **Thu Jul 07, 2016 3:58 am**

Trend Micro tends to do that, especially when autosaving.

The only thing that Factorio does is writing a temporary file named savegame.tmp.xxxx.zip and after finishing that it renames it to the proper filename.

This is considered Not a bug by the devs and I fully agree, it looks very much like a false-positive (although how a .zip file would end up as false-positive, I don't know).

See also
[0.13.1] Random save file extensions w/Anti virus detection
[0.13.4][Minor]AV Software Blocked Factorio w/ update

Posted: **Thu Jul 07, 2016 7:46 am**

Another thing is, if someone plays a 'pirated' copy. There may be anything additional in the code

.

Posted: **Thu Jul 07, 2016 9:37 pm**

Oh its a legit copy via steam

Factorio Forums

Trend Micro thinks Factorio is ransomware (.13.6)

Trend Micro thinks Factorio is ransomware (.13.6)

Re: Trend Micro thinks Factorio is ransomware (.13.6)

Re: Trend Micro thinks Factorio is ransomware (.13.6)

Re: Trend Micro thinks Factorio is ransomware (.13.6)