Ransomware Defense

Written by Eric Wyatt (last updated September 23, 2019)

6

Over the last couple of years, a growing threat to computer users has been the rise of what is known as ransomware. Ransomware attacks are caused by malicious malware installed on your computer. This malware allows attackers to possibly encrypt your data or disable your system. Attackers then demand money (often in the form of Bitcoin) to release your system back to you. After a decline in the number of attacks in 2018, 2019 has seen ransomware attacks double. It is estimated that over 13 million Americans, of all walks of life, have been victims of a ransomware attack. These attacks are not isolated to America; it is a worldwide issue, with attacks on governments, large corporations, all the way down to personal computers in our homes.

The best defense against ransomware attacks is to be prepared. One step to doing this has been available within Windows 10 since the October 2017 update. It is aptly named Ransomware Protection. Turned off by default, it is easy to turn on this security feature to help protect your data. Here's how:

  1. Press the Windows key and type (without quotes) "Ransomware Protection," then press Enter. Windows launches the Windows Security section of the Settings dialog box. (See Figure 1.)
  2. Figure 1. The Windows Security section of the Settings dialog box.

  3. Turn on Controlled Folder Access by clicking on the toggle button. Windows then displays a User Account Control dialog box.
  4. Click Yes on the User Account Control dialog box. The dialog box closes, and Windows activates Controlled Folder Access for these default folders: Desktop, Documents, Favorites, Music, Pictures, and Videos.
  5. To add additional protected folders, click on the Protect Folders link. Windows displays the Protected Folders settings in the dialog box. (See Figure 2.)
  6. Figure 2. The Protected Folders settings in the Settings dialog box.

  7. Close the Settings dialog box. Your settings are immediately activated.
Windows Ransomware Protection is just one component in protecting yourself from an attack. It is always a good idea to keep a backup of your files to always have a copy of your files you can access. The best protection is to educate yourself on what you need to do to safeguard your data and system. Do some research and understand ways that ransomware can show up on your system or network. A good place to start is US-cert.gov.

 This tip (13678) applies to Windows 10.

Author Bio

Eric Wyatt

Eric Wyatt is a swell guy (or so his friends tell him). He is a formally trained designer and branding expert, bringing a wide range of skills to his Tips.Net articles. ...

MORE FROM ERIC

Enable or Disable Mouse Hover Window Activation

Windows 10 allows for a window to become active by simply hovering your mouse over it. Discover how to turn this setting ...

Discover More

Clean Boot Windows 10

When your computer is not running the way it should, you can try a clean boot. A clean boot in Windows 10 provides more ...

Discover More

Disabling Printing in Edge Chromium

Do you need to disable printing within Edge Chromium? You can use the Registry Editor to disable or enable printing.

Discover More
More WindowsTips

Understanding Windows SIDs

This tip presents some information about Windows SIDs (Security Identifiers) and shows you some tools that you can use to ...

Discover More

Limiting the Number of Login Attempts

You probably don't want to allow someone to continually attempt to login to your system until they finally guess your ...

Discover More

Understanding Action Center

Action Center provides you with a quick overview of security and maintenance issues and allows you to drill down to the ...

Discover More
Comments

If you would like to add an image to your comment (not an avatar, but an image to help in making the point of your comment), include the characters [{fig}] (all 7 characters, in the sequence shown) in your comment text. You’ll be prompted to upload your image when you submit the comment. Maximum image size is 6Mpixels. Images larger than 600px wide or 1000px tall will be reduced. Up to three images may be included in a comment. All images are subject to review. Commenting privileges may be curtailed if inappropriate images are posted.

What is two more than 7?

2019-09-24 17:53:35

TW

Sheryl: I believe I know why you're seeing the message. You probably have another antivirus program installed and Windows turned off the Windows Defender antivirus program. The Ransomware protection that this article references is part of the Defender A/V program and you can't use the Ransomware protection without the Windows Defender A/V being set as the real-time scanner or the active A/V program.


2019-09-23 19:36:30

Dave H.

Tony & MW: I too had that question and went about searching as to what enabling this protection does. The main thing I learned from the article I've referenced below is that it is defaulted to disabled because it can give a lot of "false positives", which can cause one to be unnecessarily alarmed. However, this article also recommends that despite this negative, it should be enabled. You can "whitelist" those programs that it is denying access if you know it is a safe program. Here's the reference...
https://lifehacker.com/why-you-should-use-windows-defenders-ransomware-prevent-1837311176


2019-09-23 19:15:41

MW

I think Tony raised a good question that hopefully you can answer:

What happens when this MS Windows option is engaged?

I’ll bet it requires some sort of authorization before allowing changes to the folders selected.

Incidentally, many of the 3rd party backup software systems have built in Ransomware disk encryption preventions in place. The backup files they create are locked from access attempts outside of their software. e.g. I believe Macrium Reflect offers that feature.

That software feature won’t prevent attacks on your computer, but it should give you a completely defended backup disc to restore everything if you are attacked.


2019-09-23 12:49:34

Sheryl

I tried all the suggestions. Most lead to a Windows Security page "Security at a glance" with an overlay headed "Page not available" with the message "Your IT administrator has limited access to some areas of this app, and the item you tried to access is not available. Contact IT helpdesk for more information."

This is not a work computer, I am the IT Administrator, and there is no Help Desk. I have McAfee software, the whole package, and wonder if it is overriding the built-in Windows Security functions.


2019-09-23 09:26:02

Bill

I have Windows 10 64-bit Build 1903. Ransomware protection can be found in one of the security areas, but it is not found using the suggested "Press Windows key ..." sequence of actions . If you have the same problem, keep searching - it is there. Try

Windows Settings
Update and Security
Windows Security
Virus and Threat Protection
Ransomware protection.


2019-09-23 06:21:50

Tony

Now that Ransomeware protection is turned on, what is windows doing in the background? I think its important to know what's going on there may be adverse affects of enabling this.


Newest Tips