Windows 10: RansomFree is the free program that protects your PC against ransomwar

Although there are programs to protect against ransomware, the best option still remains back up your files & make system images. *Wink

RansomFree is the free program that protects your PC against ransomware | PCWorld

:)

 

folders created in c: d: and c:\users - virus?

Yes, there are several Ransomware protection tools which deliberately create
dummy folders containing specific or randomly named .bmp, .png, .gif, .docx, .xlsx, .rtf, .txt files in various locations (and partitions) on your computer as part of its functionality and what is called "Entrapment Protection".
These are trap folders and files...patterns of files and hidden virtual files that ransomware is attracted to.
Ransomfree by Cybereason is one of them. Usually when folks install these types of programs they are aware of how they work so most of us helping you didn't give that a thought.

Now that you know what they are, you may want to reinstall Ransomfree so it helps protect you against the spread of infection. The use of trap files and folders is
not a 100% solution...some data files typically will end up being encrypted by ransomware but whatever helps with prevention, I consider useful.

 

Two random directories appear in C Root drive and in the USER directory

I discovered what the problem is. It is a program from Cybereason, RansomFree. It is creating directories at the beginning and the end which I believe is to catch ransomware when it attempts to encrypt files.

 

Good day.

Thanks for the heads up.

 

Are you guys trying it?

 

I installed it this morning, but I have no intention of actually testing it.

 

I installed it as well & no problems with the program so far.

A couple more pages with further info on the program here:

https://www.cybereason.com/blog-cybe...-held-hostage/

https://www.cybereason.com/labs-blog...ware-blocking/

 

I have installed it on a newly formatted PC. Can't say I like it that much. First, it install a service and then it creates a lot of folders with funny names on System root folder and it also creates some weird account names. I will keep it for future uses.

 

Hi there

Best protection against Ransomware if you are unfortunate enough to get a warning / indication that it's present on your machine is :

1) Immediately Power OFF computer -- don't do any normal shutdown --power off as fast as possible

2) Disconnect any peripheral devices / USB external HDD's and pull out any LAN cable if using LAN. If Wifi then simply disconnect router as well / switch off. OK if you have to have connection while repairing your computer use 3/4G signal from Phones.

3) now Boot an HDD partitioning piece of software --if you know Linux then any Live distro is fine booted from a USB drive

4) Soft low level format the HDD by writing X'00' on every sector - if more than one HDD do the same to all the HDD's

6) now boot a recovery program like Macrium from USB

7) Restore your OS from a CLEAN backup - and preferably your DATA too.

8) job done. You can Boot windows normally again and re-establish Internet / LAN connections.

If you don't take regular backups you are HOSED --so it's always good to take regular backups -- full backup OS + pgms say daily - typically shouldn't take too long around 15 - 30 mins and take incremental / differential backups of data as and when you need it.

Believe me it's FAR FAR quicker to restore complete clean systems than mess around with any sort of cleansing programs.

No A/V program will ever be 100% effective -- I believe a previous poster has made the point that if there were then we'd all be using it.

Use A/V software - but once you get a notice of infection don't waste your time trying to cleanse the computer but just restore from a clean backup. It really is a lot quicker than messing around with cleansing programs which again can't be relied on to be 100% effective --especially when they are themselves run from an infected computer.

With Ransomware SWITCH OFF AT ONCE - an ordely shutdown will allow the ransomware to go about it's malevolent purpose.

Also USE computer safely - there's enough posts on this and other sites about how you can keep reasonably safe.

Cheers
jimbo

 

I noticed that, but so far my OS is running with no problems (knock on wood, just in case*chuckle).

I would have to guess it puts those files in there as either bait/detectors for any known ransomware activity.

Hopefully the program will never need to be used but it's good to know there's another layer of protection in place. How well it works remains to be seen, time will tell. Let's hope it does a good job & stops a large portion of the ransomware out there.

 

According to thread on Wilderssecurity forums, this software is not yet ready to use. Problems with multi drive systems etc.

 

Interesting - thanks for the tip!

 

I have just installed RansomFree and found the following sentence on its Q&A page.
'RansomFree currently protects all fixed drives. It does not currently protect removable media, such as USB or USB connected hard disks.'

There are three removable media on my computer. Should I install other anti-ransomeware software, such as Bitdefender Anti-Ransomware?

 

Perhaps I can suggest a more reliable, vetted alternative: The No More Ransom Project. This group is funded by over a dozen "name" security/anti-malware companies and offers a range of ransomware decryptors for free. Just found out about this today in response to a story I wrote for CIO.com that hit last week.
HTH,
--Ed--

 

Your suggestion is a cure, but I am looking for a preventive measure.