AntiRansom is designed to detect, stop, and get the key or password being used by Ransomware using honeypots.

For me, Honeypot makes me think of Winne The Pooh, but Honeypots are bogus computer resources deployed by network administrators to act as decoy computers and detect any unauthorized access.

To get around this, Anti Ransom will create a random decoy folder with many useless random documents including Excel, and PDF and then monitor the folder waiting for any changes. When a change is detected, AntiRansom tries to identify wich process is the responsible of such change and then stops it and dumps the memory process with the hope that the key or password that is being used by the ransomware is inside.

AntiRansom warns that installation can take 5 minutes. We got the "Not Responding" windows that commonly occurs when a program is frozen. However, the window was moveable, so we knew it was installing, just without the typical file progress GUI, so watch for that. There is also an uninstall.

AntiRansom is designed for advanced users. Since it creates a random folder, you're probably not going to find it. I checked Task Manager to track it down and found it as seen in screenshot two below. It occasionally spiked the CPU to 3- percent but uses very little memory, so it shouldn't be noticed.

Now for the problem. We're not infected. Does it work? We don't know. In theory, it should, but you're going to need to run into this type of ransomware. Either way, we're all about security and niche tools here at MajorGeeks, and we hope that it helps someone.