As I said on reddit: So any compression utility is a false positive. And as long as I understand all detection worked because no countermeasure was implemented in current ransomware. I thought of one simple contermeasure which simply reduce all this effort to nothing. I'm all but impressed

I contributed to wikipedia but I'm geek so I'm no qualified for non geek problems can you develop

In fact there is a wysiwig interface on the road wich will make the editing less geeky