Windows 10: Windows Ransomware Protection deleted my tax preparation file

I e-filed my taxes using HRBlock 2020 tax preparation software for Windows. Afterwards I switched on the Windows Ransomware Protection feature. When I subsequently reopened the tax software to check on the status of my return, there was a pop-up from Windows Defender showing it had blocked a change to a protected folder. I then turned off the Ransomware Protection feature and reopened the tax software which informed me that it couldn't find any saved returns from 2020. I searched for the file using Windows search with options to search for hidden files and folders but nothing tur

:)

 

Malware and ransomware protection

You might also want to have a look at:

• https://www.microsoft.com/en-us/wdsi/help
• Top 10 Ways PUPs Sneak Onto Your Computer. And How To Avoid Them.
  
• Ransomware FAQ - Windows Defender Security Intelligence
• Ransomware Avoidance
  
• How to remove ransomware the right way: A step-by-step guide
  

 

Malware and ransomware protection

First things first:

1.) If you’re using Windows Defender, then the first thing you need to do is turn on Windows Defender’s new built-in
Ransomware Protection – known as “Controlled Folder Access” (it’s disabled by default):

https://cloudblogs.microsoft.com/mi...-folder-access/?ocid=cx-blog-mmpc?source=mmpc

https://docs.microsoft.com/en-us/wi...guard/enable-controlled-folders-exploit-guard

2.) The next thing you should do is prepare for the worst by creating a backup of all of your personal files on a removable hard drive, flash drive, or recordable disk – and then disconnect the drive. If you have
additional PCs, you can transfer your backups to those PCs. Once everything is backed up to an external device, you’re prepared to make a complete recovery in the event that your files
are rendered inaccessible by malware or encrypted by ransomware. No one can destroy all of your personal files, or hold them hostage, if you just have your own copies of those files. It's really just that simple. So it should
be reassuring to know that there is a surefire way to prevent the loss of import data and documents
– because the threat landscape is evolving so rapidly that there’s really never any surefire way to prevent a malware or ransomware attack. "Back up your files" has always been the
prime directive for any sound security strategy:

https://www.howtogeek.com/174343/ra...-is-so-dangerous-and-how-to-protect-yourself/

3.) Then, as time permits, you can go ahead and educate yourself to your heart’s content about all of the proper steps and strategies for avoiding malware and ransomware – keeping in mind, of course, that things are moving
so fast that a good fraction of what you read will already be outdated –
and remembering always these ancient words of wisdom: "The most profound knowledge of how to avoid pitfalls is of little use to a man trapped in a storm sewer".

 

Ransomware attack

Glad to hear that you found a backup of your important files! Good!

Here are some further articles you might want to read:

• Best Defensive Strategy against ransomware (crypto malware)
• How to Protect and Harden a Computer against Ransomware
• https://www.bleepingcomputer.com/forums/t/691026/can-antivirus-software-remove-ransomware-from-my-infected-system/?p=4692721
  
• https://blog.emsisoft.com/en/26164/how-to-remove-ransomware-the-right-way-a-step-by-step-guide/
  
• First steps when dealing with ransomware
  
• How crypto ransomware spreads... is it decryptable...should I pay the ransom
• https://www.howtogeek.com/434676/should-you-pay-up-if-you-get-hit-by-ransomware/
  

Best wishes,

.