Hacking Strange issue with cafiine_server.exe ... Ransomware.

[Phantom64]

I have Malwarebytes anti-ransomware installed on my PC, when i try to launch cafiine_server.exe (needed for using cafiine without the SD method), MBAR says (A ransomware activity has been found in "cafiine_server.exe")
I'm using MrRean's cafiine.

No, none of my files has been crypted lol

 

[Deleted User]

false alarm

 

[Phantom64]

false alarm

yeah it is, but why. D:

 

[Deleted User]

Maybe because of how it affects files

 

[Phantom64]

@MrRean @NWPlayer123
Do you know why? \:

 

[VinsCool]

Simply because it allows your wiiu to remotely access files on your pc.

 

[Phantom64]

Simply because it allows your wiiu to remotely access files on your pc.

It makes sense, thank you!

 

[MrRean]

It opens a port

 

[greenlanternx]

Simply because it allows your wiiu to remotely access files on your pc.

with that logic any ftp and web server should be detected (even samba services a.k.a. windows filesharing)

 

[VinsCool]

with that logic any ftp and web server should be detected (even samba services a.k.a. windows filesharing)

Like mr rean explained above, caffine opens a port.

 

[greenlanternx]

Like mr rean explained above, caffine opens a port.

I know, but apache opens the 80, ftp open 21, mysql 3306, and the list continues, maybe has a binary signature similar to a ransom...