Including Files by Name or Extension

To include files or extensions that are not yet listed as possible malware, select 11. Locally added Ransomware File name and Extensions from the Exclusions and Inclusions screen (STRAR> 6) as shown in Starting Anti-Ransomware.

The Ransomware Files and Extensions screen appears.

​                       ​ Ransomware Files and Extensions​                                                                                                           ​ Type options, press Enter.​                              ​                ​          ​ 1=Select​ ​ 4=Delete ​                 ​ Subset  . . . . .​                ​                                                                                         ​ Opt​ Type​ File or Extension​                                                      ​ ​  ​ ​ USR​ ​ XYZ                                                                    ​                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               ​       Bottom​  ​ F3=Exit​   ​ F6=Add New​  ​ F12=Cancel​                                              ​                                                                                                                                                                  ​

The body of the screen contains a line for each filename or extension that has been added to the list. For each, it shows the type of file in the Type field and the file or extension name in the File or Extension field.

To add a new file or extension to the list, press the F6 key. The Add Ransomware File or Extension screen appears, as shown below.

To view and modify information on a file or extension, enter 1 in the Opt field in its line. The Modify Ransomware File or Extension screen, which has the same fields as the Add Ransomware File or Extension screen, appears.

To delete a file or extension from the list, enter 4 in the Opt field in its line. The Delete Ransomware File or Extension screen appears, confirming that you want to delete the listing.

​                       ​ Add Ransomware File or Extension​                                                                                                        ​  Type choices, press Enter.    ​                                                                                                                                  ​  File or Extension .​                                                                                                                                               ​                                                                               ​  Source  . . . . . .​ USR​                                                                                                                                         ​  Related to malware.​               ​                                                                                                                              ​  Description . . . .​                                    ​                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   ​ F3=Exit​ ​ F12=Cancel ​                                                            ​                                                                                                                                                                  ​

The body of the Add Ransomware File or Extension screen contains these fields:

File or Extension

The file name or extension to be included in the list. Extensions begin with a period (".").

Source

The source of the information. If the User is supplying it, set the field to USR.

Related to malware

Names of malware that uses this name or extension.

Description

A free-form description of the name or extension.