Windows 10: Anti-ransomware protection in Fall Creators Update

Page 4 of 4 FirstFirst ... 234
  1. TairikuOkami's Avatar
    Posts : 3,420
    10.6 Home 1809 x64
       25 Nov 2017 #31

    When you want anti-ransomware protection, deny access to Users and SYSTEM to any backup folder. Tested on wannacry.
    Users, obviously and SYSTEM, because ransomware usually gains system rights, not admin, so it is very easy to avoid.
    Windows method works by denying access to every software except allowed, it is better to just deny access to all.
    Attached Thumbnails Attached Thumbnails capture_07302017_205032.jpg  
      My ComputerSystem Spec

  2.    25 Nov 2017 #32

    TairikuOkami said: View Post
    When you want anti-ransomware protection, deny access to Users and SYSTEM to any backup folder.
    Probably you should deny Trusted Installer as well. Any Administrator process can do what it wants though so if you run as part of Administrator group there is no point restricting anything really.
      My ComputerSystem Spec

  3. TairikuOkami's Avatar
    Posts : 3,420
    10.6 Home 1809 x64
       25 Nov 2017 #33

    Trusted Installer and Administrators, are very unlikely to be used by ransomware. Ransomware uses SeTcbPrivilege, which gives it SYSTEM rights, that is more elevated than admins, so when blocked, admins can have access, but SYSTEM not.
      My ComputerSystem Spec

  4.    25 Nov 2017 #34

    Oh come on you (or any malware) can use this Launch processes with TrustedInstaller privilege

    If you don't run under a standard account you only have yourself to blame.
      My ComputerSystem Spec

  5. TairikuOkami's Avatar
    Posts : 3,420
    10.6 Home 1809 x64
       25 Nov 2017 #35

    lx07 said: View Post
    Oh come on you (or any malware) can use this Launch processes with TrustedInstaller privilege
    Hackers might, but malware is generally dumb.
    Petya, Wannacry, Badrabbit, all use SeTcbPrivilege.
      My ComputerSystem Spec


 
Page 4 of 4 FirstFirst ... 234

Related Threads
Fall Creators Update in General Support
Has anyone installed it yet? If so did it break anything for you? Debating If I should update or not.
Solved Oct 17 Creators Fall update in Installation and Upgrade
Why is the Fall Creators update coming on Sunday instead of Tuesday? I still haven't received the April Creators update. Will Fall update skip the April update? Just curious.
Fall Creators Update in General Support
Anyone know what changes or improvements will be in the fall update?
Read more: Microsoft will call Windows 10's next update the 'Autumn Creators Update' in the UK | Windows Central Update: The Windows 10 Autumn Creators Update will be called 'Fall Creators Update' after all | Windows Central
Source: Windows 10 Creators Update provides next-gen ransomware protection Windows Security
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 07:47.
Find Us