# Ransom ware attack message
**URL:** https://community.mp3tag.de/t/ransom-ware-attack-message/53354
**Category:** Support
**Created:** [May 27, 2021, 4:03pm UTC](https://community.mp3tag.de/t/ransom-ware-attack-message/53354 "2021-05-27T16:03:45Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@Kuchlei](https://community.mp3tag.de/u/Kuchlei)
#### Post date: [May 27, 2021, 4:03pm UTC](https://community.mp3tag.de/t/ransom-ware-attack-message/53354/1 "2021-05-27T16:03:45Z")
I currently have v3.07 which I installed on May 21, 2021. I was doing some selective tag updates using an Action I created to copy the artist tag to the album artist tag. These files were recovered from my old Ipod Touch. I was able to do about half of the files when I got a message from the Acronis software that it appeared that MP3TAG was perpetrating a ransomware attack. This never happened with the older versions of MP3TAG. I don't really think there was an attack but something in the new version must be doing something to the mp3 files that makes Acronis think it is.
Acronis did a recovery of the files in question. I did a scan of the files and my system to see if there were any viruses or malware but all seems OK.
Any Ideas as this is somewhat concerning.
I was unable to capture the messages but if it happens again I will and add them to this post.
---
### Author:  [@Florian](https://community.mp3tag.de/u/Florian)
#### Post date: [May 27, 2021, 4:16pm UTC](https://community.mp3tag.de/t/ransom-ware-attack-message/53354/2 "2021-05-27T16:16:24Z")
Same reply as here:
> [@Cisco AMP Flags Malware](https://community.mp3tag.de/t/cisco-amp-flags-malware/53311/2):
>
> Thanks for the feedback! Probably a false positive — I've just scanned via [VirusTotal](https://www.virustotal.com/gui/file/d00a038a7e79a67116907748c8fec877f54348007766dd52b3522fdc7afbd949/detection) and all 68 engines say it's clean.
---
### Author:  [@MP3Freak\_Peter](https://community.mp3tag.de/u/MP3Freak_Peter)
#### Post date: [May 27, 2021, 8:20pm UTC](https://community.mp3tag.de/t/ransom-ware-attack-message/53354/3 "2021-05-27T20:20:21Z")
> [@Kuchlei](#):
>
> (..) about half of the files when I got a message from the Acronis software that it appeared that MP3TAG was perpetrating a ransomware attack.
logic mistake? an software that access many files is not automatically a ransomware...
maybe you can configure acronis to ignore mp3tag task.
You may contact actronis support what's the trigger for that warning.
---
### Author:  [@system](https://community.mp3tag.de/u/system)
#### Post date: [June 26, 2021, 8:20pm UTC](https://community.mp3tag.de/t/ransom-ware-attack-message/53354/4 "2021-06-26T20:20:35Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.