Ransomware Protection?

My extra layer of protection is Linux. All my online activities like web browsing, emails, downloading... are done in a virtual machine running either Linux Mint 18 or Fedora 24. So it's pretty much impossible for my system to catch some ransomware. And if somehow my system gets infected nonetheless I've got backups.

Ransomware is only a threat to careless people who are too lazy to make backups or to people who don't have the knowledge to deal with this kind of threat. But that's in fact the case with all kind of malware.

simrick said:

Hi.
No, W10 is not impervious to a Ransomware attack. There are several options available to you; one you're already implementing: Keeping a backup offline. Some others to consider:

HitmanPro.Alert
CryptoPrevent

I have heard that the Malwarebytes Beta Anti-Ransomware may not yet be ready for prime-time, but have not tried it myself, and the evaluations I am referring to are several weeks old. This feature will eventually be rolled into their paid product.

Malwarebytes Antiexploit is another good little program to have installed, protecting your browsers against zero-day exploits.

As always, the best defense is the person between the keyboard and the screen. However, even the safest surfer can be hit by an exploit kit on a compromised site, (which is recently another method of attack for the ransomware), so it's important to be protected with a layered approach.

Hope that helps. :)

Is there any use for HitmanPro.Alert AND MBAM MBAE?

TairikuOkami said:

Quite the opposite, virtually all ransomware uses Windows inbuilt powershell to infect systems.

New Cerber Ransomware Variants Morph Every 15 Seconds
PowerWare Ransomware Uses PowerShell for Fileless Infections

I disable WSH and remove powershell, that prevents ransomware and majority of other malware as well.

A closer look at the Locky ransomware

reg add "HKCU\Software\Microsoft\Windows Script Host\Settings" /v "Enabled" /t REG_DWORD /d "0" /f
reg add "HKLM\Software\Microsoft\Windows Script Host\Settings" /v "Enabled" /t REG_DWORD /d "0" /f

Take ownership and delete folders
C:\Program Files (x86)\WindowsPowerShell
C:\Program Files\WindowsPowerShell
C:\Windows\System32\WindowsPowerShell
C:\Windows\SysWOW64\WindowsPowerShell

CryptoWall, Locky, and Cerber Are Todays Top 3 Ransomware Threats

If you need powershell, you can restore it using SFC scan and to enable WSH, you will change value from 0 to 1.

Anti-ransomware tools such as Bitdefender Anti-Ransomware should be considered for Win10, too. However, I'm not sure if they are Win10 compatible? Does anyone have info?

Windows 10 is definitely not safe from malware and crypto viruses. A friend that works in the field of infosec stuff told me there is a new ransomware that targets Windows 10 specifically and Win10 users like me (damn me for upgrading to Win10...willingly ) should be extra careful..I've already been through one ransomware infection while I was running Windows 8.1, and it's a total nightmare.. It's like I lost my PC to physical damage... same thing as my PC being stolen!

I found the following about this Win10 ransomware: it splits files into different parts in addition to locking them, making the decryption job even more impossible than previous ransomware variants. More info here: Latest In Ransomware: .PLC Virus Splits Files In Encrypted Parts

simrick said:

HitmanPro.Alert says it will prevent encryption if you get hit; it's a paid program, but I believe it offers a 30-day trial. MBAE is free, and protects your browsers. I put MBAE and CryptoPrevent on every system I own or work on. Depends on how vulnerable you feel.

I know it's a paid product and I'm willing to spend money on a good protection for PC. Right now I'm using Windows Defender + MBAM Free + MBAE + MBAR. But people keep claiming that MBAR is not stable. So I thought that that instead of it I should use Hitman. But hitman is also a antimalware software.

Should I keep MBAE + WD + MBAM free + cryptoprevent?

So which is the best anti-ransomware tool for Win10?

Also I have another question: Has anyone considered using a second generation security program parallel to a normal AV? I read such programs are better at protecting from financial viruses.. But don't know which one to consider..

[

gall0 said:

Also I have another question: Has anyone considered using a second generation security program parallel to a normal AV? I read such programs are better at protecting from financial viruses.. But don't know which one to consider..

Your brain and your common sense. Simple and easy to use.

doriandiaconu said:

I know it's a paid product and I'm willing to spend money on a good protection for PC. Right now I'm using Windows Defender + MBAM Free + MBAE + MBAR. But people keep claiming that MBAR is not stable. So I thought that that instead of it I should use Hitman. But hitman is also a antimalware software.

Should I keep MBAE + WD + MBAM free + cryptoprevent?

WD + VoodooShield + MBAE Free = Best free protection ever, and it's light and simple. I don't feel like paying money for antivirus because there's many free version out there that can do ways better such as Avast Free. Who would pay money for Avast Pro or Avast Internet Security when the Avast Free + Windows Firewall is already strong enough.

Also, no security software will going to protect you all the times if your brain and common sense not that good.