How does Ransomware Protection work?

[toquehead]

I turned on Ransomware Protection: Replace Max 5% of Files on Either side.

I expected this to mean if more than 5% of the files in my profile were being replaced, then stop the backup.

But it doesn't seem to be working that way. My profile has 1000's of files, but one folder has only Syncovery .ini files in it (3 files: syncovery.ini, syncovery.ini.bak, syncovery.ini.bak2). When the ini file changes, so do the other two, and the Ransomware setting was preventing the profile from running unattended:

Not executing because there are too many replacements: 3 File(s) (10.34%) on the right-hand side.

The 10% calculated number is because there are 35 files due to versioning.

What does the x in "Replace Max x% of Files" refer to? Only within the context of a single folder?

[superflexible]

The percentage refers to the total number of files that Syncovery sees. I assume the problem happens in real-time mode, where Syncovery only processes one folder, or a few folders, where changes have occurred. In other words, you cannot use the ransomware protection in real-time mode.