HELP PROTECT YOURSELF: How to enable Ransomware Protection in Windows 10 with Windows Defender

 PROTECT YOURSELF: How to enable Ransomware Protection in Windows 10 Windows Defender

This method is not a guarantee of total safety, but it's better than what you don't have.

The option for Ransomware Protection is disabled by default even though it is available as a native option since the release of Windows 10 version 1709.

It’s hard to understand why Microsoft would do this, but then I thought it is possible that Windows Defender could identify a legitimate application as a threat and block it, which is not something the user would want due to the frustration it would add

Ransomware is one the nastiest forms of malware. It stealthily encrypts your data (family pictures and videos, documents are commonly targeted), which will prevent you from accessing them. Just think, all your kids pictures gone for good!

It may even lock the bootloader when you reboot or turn off the computer. The malware displays a screen ( sample below ) demanding a ransom from the user which usually involves a crypto-currency payment address usually, that you have to send money to which of course is not trackable.

Adding to the stress, there is no guarantee that a payment will provide the unlock key required to regain access to files that the ransomware encrypted. Ransomware attacks are often have a timer to add another pressure layer to the ransomware demand. Affected users are asked to pay the amount in time as they won't be able to decrypt their files anymore once the timer runs out.

Decryption tools are available for some ransomware types but these are released after an outbreak usually and not available right from the start.

If you follow the news you hear about countless companies such as, hospitals, municipalities, small business falling victim to ransomware already. In newer cases companies carrying Cyber Security Insurance are targets ensuring the hackers are paid without question

https://www.cbc.ca/news/technology/ransomware-ryuk-ontario-hospitals-1.5308180

https://www.simcoe.com/news-story/8856887-ransomware-costs-continue-to-climb-for-wasaga-beach/

https://www.cbc.ca/news/canada/sudbury/ransomware-attack-algoma-health-1.5107037

https://www.cbc.ca/news/canada/north/nunavut-government-ransomware-1.5346144

There are only a few options to protect against ransomware attacks. Two of the most effective are backups and security software that protects against this type of ransomware. Top tip: Always keep your computer security up-to-date and Back up you data!

How to enable Ransomware Protection in Windows Defender

1. Open the Windows Security Dashboard by double-clicking on the Defender taskbar icon (or use the Settings app and select Update & Security > Windows Security).

2. Click on Virus & Threat Protection.

 3. Scroll down to Ransomware Protection.

4. Click on Manage Ransomware Protection (click Okay on the User Access Control pop-up if it is displayed).

5. On the next page, you will find a toggle for Controlled Folder Access. Enable the option. You have now finished installing ransomware protection on your device.

Most antivirus programs use behavioral scanning to prevent new or unidentified malware. In other words, they monitor your computer's services, applications, anything in the background, for suspicious activity. For example, when an otherwise harmless file tries to gain access to your documents folder to execute a script that encrypt the files in it, Windows Defender will stop the malware to protect your data.

By default, the Ransomware Protection only covers specific folders. To view the ones that are secured, click on the Protected Folders option. It's just the User folders like Documents, Pictures, Videos, Music, Desktop and Favorites by default.

So, what happens if a ransomware targets files in other folders? The files are affected unless the ransomware is quarantined before it starts to encrypt files on the device. But don't worry there is a way to secure them.

There is an option on the top of the Protected Folders screen, which says "Add a protected folder". Click on it and choose any folder you want and it will be protected by Windows Defender. The folders can be on any partition or hard drive: they will be secured by the feature.

This method is not a guarantee of total safety, but it's better than what you don't have.

It is always a good idea to do a regular backup of your files, folders, pictures etc.