Preventing that encryption hack thing
Discussion
Can't remember what it's called, but it's the hack where the bad people encrypt all your data and demand money to release it (Bitcoins usually).
I used to add a rule in gpedit.msc to stop executables from AppData, but I can't run gpedit.msc in Win10.
Has this security hole been plugged in Win10, or do I still need to change a group policy somewhere?
I used to add a rule in gpedit.msc to stop executables from AppData, but I can't run gpedit.msc in Win10.
Has this security hole been plugged in Win10, or do I still need to change a group policy somewhere?
rfisher said:
Can't remember what it's called, but it's the hack where the bad people encrypt all your data and demand money to release it (Bitcoins usually).
I used to add a rule in gpedit.msc to stop executables from AppData, but I can't run gpedit.msc in Win10.
Has this security hole been plugged in Win10, or do I still need to change a group policy somewhere?
it's still there in 10, but no gpedit in 10 Home AFAIK, you need IIRC Pro or better.I used to add a rule in gpedit.msc to stop executables from AppData, but I can't run gpedit.msc in Win10.
Has this security hole been plugged in Win10, or do I still need to change a group policy somewhere?
There's an option in Windows Security to protect against ransomware attacks (something to do with controlled folder access and OneDrive backups I think).
https://support.microsoft.com/en-us/windows/protec...
https://support.microsoft.com/en-us/windows/protec...
mmm-five said:
There's an option in Windows Security to protect against ransomware attacks (something to do with controlled folder access and OneDrive backups I think).
https://support.microsoft.com/en-us/windows/protec...
Yes.https://support.microsoft.com/en-us/windows/protec...
It is quite annoying, but given how intrusive it seems to be I assume it works well.
It's Ransomware.
I would:
Keep your Windows version up to date and security patched.
Watch what you download and execute (although anyone can get fooled at some point).
Use some of the Windows security settings suggested (although some of the settings are too onerous).
Run regular security scans with some decent security software.
And most importantly, take backups of your data. The frequency depending on how important your data is to you. I do it once a week, with the oldest available being 6 months (and one bare system restore version). Most backup software, including the free stuff, is very good now.
I would:
Keep your Windows version up to date and security patched.
Watch what you download and execute (although anyone can get fooled at some point).
Use some of the Windows security settings suggested (although some of the settings are too onerous).
Run regular security scans with some decent security software.
And most importantly, take backups of your data. The frequency depending on how important your data is to you. I do it once a week, with the oldest available being 6 months (and one bare system restore version). Most backup software, including the free stuff, is very good now.
Windows native protection isn’t great to be honest. If it were me I’d be looking at buying a dedicated 3rd party solution to protect my PC, and many allow use of it across additional devices, so mobile and tablet. Have a look at Trend Micro and the like, but be sure it’s offering anti-ransomware.
pokegone said:
Windows native protection isn’t great to be honest. If it were me I’d be looking at buying a dedicated 3rd party solution to protect my PC, and many allow use of it across additional devices, so mobile and tablet. Have a look at Trend Micro and the like, but be sure it’s offering anti-ransomware.
You may find the built-in protection is much better than it used to be.Of course, it doesn't include the 'value added' offerings some of the others provide like email phishing protection, non-Microsoft browser protections, VPN, password wallets, credit file checking, etc. but it's free and doesn't induce any extra overheads/incompatibilities that some do.
https://uk.pcmag.com/antivirus/25697/microsoft-win...
mmm-five said:
pokegone said:
Windows native protection isn’t great to be honest. If it were me I’d be looking at buying a dedicated 3rd party solution to protect my PC, and many allow use of it across additional devices, so mobile and tablet. Have a look at Trend Micro and the like, but be sure it’s offering anti-ransomware.
You may find the built-in protection is much better than it used to be.Of course, it doesn't include the 'value added' offerings some of the others provide like email phishing protection, non-Microsoft browser protections, VPN, password wallets, credit file checking, etc. but it's free and doesn't induce any extra overheads/incompatibilities that some do.
https://uk.pcmag.com/antivirus/25697/microsoft-win...
Mr Pointy said:
Do any of these help?
https://duckduckgo.com/?t=ffcm&q=gpedit.msc+in...
https://www.itechtics.com/enable-gpedit-windows-10...
Yup - I now have gpedit.msc and have added the new path policy.https://duckduckgo.com/?t=ffcm&q=gpedit.msc+in...
https://www.itechtics.com/enable-gpedit-windows-10...
Didn't realise that Home was a bit carp and still had this security hole.
Help appreciated
mmm-five said:
There's an option in Windows Security to protect against ransomware attacks (something to do with controlled folder access and OneDrive backups I think).
https://support.microsoft.com/en-us/windows/protec...
That seems to be the equivalent of using app locker via gpedit as the OP described. Nice, I'd forgotten that had existed.https://support.microsoft.com/en-us/windows/protec...
Turn7 said:
whats considered good these days ?
Windows defender or something was the last one I heard....
Like others have written, the built in Microsoft program is considered pretty good now. Hence other paid for security software has had to add lots of other features in order to justify the price. Windows defender or something was the last one I heard....
Personally, I don't think the extra features are worth it, so I stick with the Microsoft security scan (which runs automatically behind the scenes) and then use the free version of Malwarebytes and run its scan once per week.
Not sure what you used before but AppLocker could limit where programs and scripts can run, think it’s in all versions of Windows 10.
Great tool but might be tricky for home users, bit easier with standard corporate machines. You could just permit executables and scripts to run from “c:\Program Files” and “c:\windows” as a basic policy, but that may cause issues for browser plugins and similar.
Great tool but might be tricky for home users, bit easier with standard corporate machines. You could just permit executables and scripts to run from “c:\Program Files” and “c:\windows” as a basic policy, but that may cause issues for browser plugins and similar.
Gassing Station | Computers, Gadgets & Stuff | Top of Page | What's New | My Stuff