https://www.bitdefender.com/consumer.../answer/13349/
Anyone using Bitdefender and care to comment on this feature. I suppose I am most curious if anything has gone amiss if it is enabled such as a corrupted system file or perhaps it misfires and starts encrypting things that do not actually end up as backups. I am also concerned with a sluggish system if this feature is enabled. TIA.
Hi folks
Ransomeware is so easy to defend against provided you have decent clean backups (which every computer user should do as a matter of course).
If you get it do the following at once :
1) Power off IMMEDIATELY (don't power down computer - pull the plug out if necessary and if on a laptop hold power switch until machine powers off -- you do NOT want an ordered shutdown in this case). - An ordered shutdown can write things to HDD's which in the case of Ransomware you most definitely DO NOT WANT so power off immediately.
2) disconnect all external hardware - especially HDD's apart from keyboard and mouse -- that includes disconnecting from Internet. If you only have a wireless connection which connects automatically at boot switch off router.
3) stand alone restore last decent clean system image. Most backup programs e.g Macrium etc have a "create bootable rescue media" feature which when you installed the backup program you should have made as well.
4) boot restored windows system -- still no internet connection.
5) re-scan with whatever A/V software you use to check the restored system is 100% clean.
6) now you can re-connect external HDD's -- rescan those before connecting to internet -- some of the nastier ransomeware can lurk on external HDD's and since these are usually large data volumes for most people containing say music / video / photos etc you don't want to lose those either.
7) when finally all clean re-connect to Internet.
The main thing is DO NOT PANIC and shut down computer and Internet connection as fast as possible before attempting repairs.
Cheers
jimbo
Thanks. You know I could not discern from what you wrote whether or not you have left it off which as you point out is the default mode or you did in fact go ahead and enable it and going forward "haven't had any issues with it." Mine is still off.
Quote
