How to protect your PC from ransomware using Windows’ built-in protection

The image is by Maria Chimishkyan.

Computer users and businesses have been affected by the issue of Ransomware for years. It's a good idea to make sure you're protected, given the prevalence and the fact that a Ransomware can lead to the loss of valuable files like documents or family pictures. Microsoft's built-in Windows Security software can help keep your computer safe from cyberattacks.

There are two levels of Windows Security. You can learn more about the first part of the program, which consists of malware scans, which are on by default. The scans won't be able to protect your files if there is a piece of malware on your computer.

Related.

The war on ransomware was won.

You have to manually turn on the second level of Windows security. This feature is not on by default for a reason. It works by allowing approved apps to make changes to your files, which in theory prevents them from being locked away. This can cause some problems with apps that aren't expecting it, so you may have to do some trouble-shooting if you have the protection on.

It is worth keeping in mind that there will probably be some tinkering involved with this process as we go over how to enable ransomware protection.

How to turn on protection.

Windows has a security app. If you want to get to it, you have to search "Windows Security" from the start menu or "Privacy & Security" from the settings.

Noupscale is a file on thechorusasset.com.

Click the tile or the button on the left to go to "Virus & threat protection" once you're in Windows Security.

To turn on the protection, go to "Virus and threat protection" and click "manage."

:noupscale is a file on thechorusasset.com

You can get to the Ransomware protection page if you click on the "Manage ransomware protection" link.

You can turn on a feature called "Controlled folder access," which will make it so that unauthorized apps won't be able to make changes to your documents, pictures, videos, or music folders.

:noupscale is a file on thechorusasset.com

Unauthorized apps can't make changes to files in certain protected folders if they switch on the "Controlled folder access" feature.

How to change folder access.

You will see three more control panes once you switch Controlled folder access on. By default, controlled folder access will only allow a list of approved apps to make changes to files in the Documents, Pictures, Videos, and Music folders on your computer. You can change how the system works with these apps.

You can add other folders that you want to protect using the "Protected folders" screen and manage which apps are allowed to make changes to protected folders using the "Allow an app through controlled folder access" screen.

Here is what you can do.

:noupscale is a file on thechorusasset.com

There is a panel called the "ransomware protection"

Blocks of history.

According to a statement in one Windows security page, apps that are determined by Microsoft as friendly will always be allowed to make changes to your protected folders, but that doesn't mean that every app you'll want to use will be allowed by default. If you see a weird error when you try to save a file, you may want to check the "Block history" to see if Windows Security has been keeping that app.

:noupscale is a file on thechorusasset.com

You can see which apps tried to write to protected folders on the block history screen.

You can see what app was blocked and what folder it was trying to write to. Adding the app to the list of programs that can make changes will help you resolve the issues with it. We will go over how to do that in a moment.

Noupscale is a file on thechorusasset.com.

The FireFox download screen said the file I was trying to save could not be found.

There are protected folders.

You can add a protected folder if you want to protect the Desktop folder, which isn't protected by default.

:noupscale is a file on thechorusasset.com

Adding a folder to the protected folder list will prevent apps from writing to it.

Click the button to select the folder you want to protect.

Noupscale is a file on thechorusasset.com.

Click the button if you want to protect the folder.

You can remove protection from custom-added folders by going back to the "Protected folders" screen, clicking on the folder you added, and then clicking the Remove button.

Allow an app to have controlled access.

If you want to add an app to the allowed list of apps, you have to go back to the Ransomware protection page.

Clicking on the Add an allowed app button will allow you to see a list of the apps that have recently tried to write to your protected folders.

:noupscale is a file on thechorusasset.com

You can find a list of the apps that have tried and failed to make changes to your files by clicking on the recently blocked apps.

You can unblock it by clicking on the plus button next to its name.

:noupscale is a file on thechorusasset.com

Clicking the plus button next to an app's name will allow it to make changes to files in your protected folders.

You should only have to do this once per app, but it can be frustrating. You can turn off Ransomware Protection at any time, but if you believe that you are at high risk for infections and don't have backups, you should think carefully before doing so.

There are more ways to protect yourself.

It is probably not a good idea to rely on Windows' protection as your only defense, as it should be treated as a safety net rather than your first line of defense. To make sure that your data is safe even if the worst were to happen, here are some of the things you can do.

Be careful online.

It's not unusual for ransomware to spread through a variety of ways, such as being attached to emails, exploiting security holes in out-of-date software, or masquerading as a useful program. If someone is trying to get you to download a program that seems too good to be true, proceed with extreme caution.

It is important to check the extensions of the files you receive. If someone claims that an attachment is a document, it is likely to be dangerous. If you can't see the file's extension, you can click on it. You can find out what kind of file it is by looking at the "Type of file" heading.

Some of the things that can lead to your computer being attacked are listed in Microsoft's guide to protecting yourself.

There are websites that are unsafe, suspicious, or fake.
>
You don't know what to expect when opening a file attachment.
>
There are malicious or bad links in emails, Facebook, and other social media posts.

Your software needs to be updated.

It is important to make sure that your operating system and software have the latest security patches. Windows installs updates as they become available, and most browsers will do the same. To check for updates manually, go to the settings and click on the check for updates button.

You can update any apps installed through Windows by going to the Microsoft Store app, clicking the library button in the lower left-hand corner, and then clicking the "Get updates" button. You can either click the "Update" button on individual apps or the "Update all" button at the top of the page.

Make sure you have backups.

No system is perfect and using safe browsing habits can help keep you safe. It is important to have a backup of your computer's files so that you don't lose your most valuable photos, videos, or documents. If your computer is damaged, lost, or stolen, backups can keep you from losing data.

We have a guide on how to back up your computer. One local and one in the cloud is the best way to back up. Having any kind of backup is better than not having anything at all.

If you have a computer that is being held hostage, what should you do?

There are three important steps to take if your computer is not protected.

It is important to limit the damage to your network by disabling your computer from the internet.
Paying the ransom could be illegal if you are located in a location where the hackers are, and paying does not guarantee that you will get access to your files back.
If you have backups, don't plug them in because the ransomware will attempt to destroy them as well.

If you want to do a full scans of your computer, Microsoft recommends you use Windows Security. One of the best apps to try is Malwarebytes, which is free for personal use, and is known for its ability to scrub a computer of malware. You may need to reset your PC if neither of those work.

It is best to take your computer to a professional to make sure it is clean before you attempt to recover your backups.