Windows 10: Windows Defender - Ransomware on Onedrive

Eagle51 · Jun 15, 2018

Anyone else seen this ... just showed up on my desktop today after a reboot. WDSC under Virus & Threat Protection it had Setup One Drive or Dismiss. I clicked Setup One Drive (which is already setup) ... just to see what it was and all it did was ask me to sign in to One Drive.

Note:
1. One Drive did update a couple days ago.
2. Both Desktop and Laptop (see specs) have the same version of One Drive (18.091.0506.0006).
3. Have not seen this on my Laptop.
4. I don't have Office 365 or Office of any kind on either PC (if it matters).
5. This is the regular One Drive program, NOT the store app.

Edit: Did a little digging and on my desktop in AppData\Local\Microsoft\OneDrive\settings and logs it has a Business1 folder. Laptop doesn't have that folder.

:)

Brink · Jun 15, 2018

OneDrive Files Restore and Windows Defender ransomware protection

At the beginning of April, OneDrive announced new protection capabilities that offer Office 365 Home and Office 365 Personal subscribers additional peace of mind including the ability to recover files from malicious attacks like ransomware and new tools to help keep your information secure and private. This included bringing the powerful OneDrive for Business feature, Files Restore, to your personal OneDrive account.

Today, we are taking this protection one step further with the integration of OneDrive Files Restore and Windows Defender Antivirus. This will further protect you from ransomware attacks by identifying the breach and guiding you through remediation and file recovery, so you don’t have to submit to cybercriminal demands if your files are in OneDrive.

Saving your files to OneDrive gives you an additional layer of protection from ransomware. If a ransomware threat is found on your device, Windows Defender will notify you of the threat, help you remove the ransomware from your device, and give you the option to use OneDrive Files Restore so you can recover your OneDrive files to the state they were in before the attack occurred. The date and time that Windows Defender detected the attack will be pre-selected in Files Restore, making the process simple and easy to use.

Files Restore and Windows Defender integration is available for Office 365 Home, Office 365 Personal, and OneDrive for Business users. This integration is beginning to rollout to Windows Insiders today and will be available to all Windows 10 April 2018 Update users in the coming weeks. Learn more about the protections available to Office 365 Home and Personal subscribers.

After removing the ransomware from your device, you can start the OneDrive Files Restore process by clicking the notification

Files Restore opens with the date and time of the attack pre-selected, so you can restore your files to before they were compromised
Click to expand...

Source: OneDrive Files Restore and Windows Defender takes ransomware protection one step further - Microsoft Tech Community - 188001

FordGT90Concept · Jun 15, 2018

Windows 10 - OneDrive

Right click on the app and one of the properties has an option to not automatically start it. Uncheck, restart the computer, and it should stop. If you want to go another step further, find the OneDrive app in the start menu, right click on it and uninstall.

If that is still insufficient, there is a batch uninstaller for OneDrive available online. I can copy the code here if you need it.

Solaris17 · Jun 15, 2018

Say goodbye to ransomware with Windows 10 Fall Creators Update

Yes, ransomware will be a thing of the past with Windows 10 Fall Creators Update thanks to something called "Controlled Folder Access" in Windows Defender.

Windows 10 will hide your important files from ransomware soon | The Verge

These are protections for your files against ransomware at the kernel and Windows Defender level. Rest easy, your files are safe.

About damn time Microsoft!
Click to expand...

lol

Windows 10: Windows Defender - Ransomware on Onedrive

Windows Defender - Ransomware on Onedrive

Windows Defender - Ransomware on Onedrive

Windows Defender - Ransomware on Onedrive

Windows Defender - Ransomware on Onedrive - Similar Threads - Defender Ransomware Onedrive

Windows Defender Ransomware Protection off

Windows Defender Ransomware Protection off

Windows Defender Ransomware Protection off

Ransomware OneDrive.

Is OneDrive a ransomware product?

Enabling Ransomware in Windows Defender 10

OneDrive files contain ransomware

Windows Defender - Ransomware - Onedrive

OneDrive Files Restore and Windows Defender ransomware protection

Users found this page by searching for:

windows defender security center ransomware

windows defender one drive

windows defender setup one drive ransomware