Hello,
I am using R3dfox 144.0.2, downloaded from https://github.com/Eclipse-Community/r3dfox/releases
After r3dfox is running a while Avast recognizes it as ransomware, because i tries to modify "desktop.ini" in the users documents folder.
I am using Windows 7 64-Bit.
a screenshot of the avast message is attached.
Does anyone know why r3dfox.exe is trying to modify the desktop.ini file?
PS: I did already send r3dfox.exe and its setup installer to avast for false positive check, a week ago, but it is still not resolved.
R3dfox detected as ransomware on Avast
-
realsaturos
- Posts: 2
- Joined: 10 Dec 2025, 17:45
- OS: Windows 7
- Has thanked: 1 time
R3dfox detected as ransomware on Avast
- Attachments
-
- r3dfox_ransomware_alert2.png (36.15 KiB) Viewed 41 times
- Duke
- Full Moderator
- Posts: 457
- Joined: 16 Mar 2024, 13:32
- OS: Windows 8.1 x64
- Has thanked: 89 times
- Been thanked: 166 times
R3dfox detected as ransomware on Avast
That doesn't happen to me on Windows 8.1.realsaturos wrote: ↑20 Dec 2025, 18:44 I am using R3dfox 144.0.2, downloaded from https://github.com/Eclipse-Community/r3dfox/releases
After r3dfox is running a while Avast recognizes it as ransomware, because i tries to modify "desktop.ini" in the users documents folder.
I am using Windows 7 64-Bit.
Does anyone know why r3dfox.exe is trying to modify the desktop.ini file?
Do you save your downloads to the documents folder ? It might also be some extension.
-
realsaturos
- Posts: 2
- Joined: 10 Dec 2025, 17:45
- OS: Windows 7
- Has thanked: 1 time
R3dfox detected as ransomware on Avast
Hello Duke,
it happens on a completely fresh r3dfox installation.
I did not install any extension, and the Download Folder inside r3dfox settings is the default: C:\users\username\Downloads
it happens on a completely fresh r3dfox installation.
I did not install any extension, and the Download Folder inside r3dfox settings is the default: C:\users\username\Downloads
- Duke
- Full Moderator
- Posts: 457
- Joined: 16 Mar 2024, 13:32
- OS: Windows 8.1 x64
- Has thanked: 89 times
- Been thanked: 166 times
R3dfox detected as ransomware on Avast
Looks like it's a known Firefox issue:
https://bugzilla.mozilla.org/show_bug.cgi?id=1948976
https://connect.mozilla.org/t5/discussions/does-firefox-ever-write-to-logged-in-users-documents-folder/td-p/97020
https://connect.mozilla.org/t5/discussions/firefox-134-0-blocked-by-defender-needs-controlled-folder-access/m-p/94265
https://bugzilla.mozilla.org/show_bug.cgi?id=1948976
https://connect.mozilla.org/t5/discussions/does-firefox-ever-write-to-logged-in-users-documents-folder/td-p/97020
https://connect.mozilla.org/t5/discussions/firefox-134-0-blocked-by-defender-needs-controlled-folder-access/m-p/94265
Who is online
Users browsing this forum: No registered users and 1 guest