Advice: How to recover from ransomware attacks

CalinGhibu

From TEMASOFT
Thread author
Verified
Developer
Mar 15, 2017
58
This article provides information on what to do when attacked by ransomware, depending on how important the files are and your skills when using computers. Everyone should have the important files backed up on a regular basis. This ensures that you do not lose it all in case your computer is compromised.

In essence, these are the steps to take:
- Find and stop the encrypting process;
- Disinfect the machine;
- Recover the files;
- Implement prevention mechanisms.
Details here.
 

Peter2150

Level 7
Verified
Oct 24, 2015
280
Sorry, but to me that looked advertising. If your files are important files should be backed up more frequently then a regular basis. Also you shouldn't need a ransom ware solution. If you depend on a ransomware solution it is too late. YOU ARE INFECTED.

The solution is to not let the ransomware get on your system in the first place. It is possible to achieve this.
 

RoboMan

Level 36
Verified
Top Poster
Content Creator
Well-known
Jun 24, 2016
2,503
Sorry, but to me that looked advertising. If your files are important files should be backed up more frequently then a regular basis. Also you shouldn't need a ransom ware solution. If you depend on a ransomware solution it is too late. YOU ARE INFECTED.

The solution is to not let the ransomware get on your system in the first place. It is possible to achieve this.
Yes, it's possible to avoid ransomware by installing an anti-ransomware solution. There are plenty of free tools that will detect/block encrypting processes and/or maware such as ransomware. Many AV/suites today include it. There are even tools that if they couldn't stop the ransomware, they'll let you recover your files thanks to a daily backup they create.

Any anti-ransoware solution is a MUST today. Of course, when your antivirus provides it that should be it. If it does not or you do not use an antivirus, you should have some kind of tool to be protected against these type of attacks (anti ransomware, anti executable, daily backups, etc).

As referring to the article, i do not know if i'd advise to reboot the computer since many ransomware pieces will use a reboot as a final process of encryption. As well, if infected and already removed the malware, i would check for existing shadow copies, since many ransomwares do not delete shadow copies (advanced ones do). That's how i could recover my dad's laptop files.
 
  • Like
Reactions: bribon77

NikolayfromRussia

Level 16
Verified
Top Poster
Jul 3, 2014
750
For me the best way is to have a solid backup solution. Simple.

I also think so. Because you will never know when your PC is attacked by ransomware or antivirus protection can miss it.
m19066.gif
The best solution is backup stored on the external storage devices.
 
Last edited:

RoboMan

Level 36
Verified
Top Poster
Content Creator
Well-known
Jun 24, 2016
2,503
Correct...


There're are other solutions out there that can do more, I prefer those kind rather than those anti-ransomware types.
I do not mean anti ransomware solution as it sounds. I refer to anti ransomware solution to any kind of solution that can help avoid ransomware as mentioned (anti executable, backups, etc).
 

roger_m

Level 44
Verified
Top Poster
Content Creator
Dec 4, 2014
3,335
For me the best way is to have a solid backup solution. Simple.
Yes, it doesn't matter if your data gets encrypted if you have a current backup. As well as that, if you keep Windows and vulnerable software updated and are not click happy, then it's highly unlikely you will ever get infected by ransomware.
 
  • Like
Reactions: frogboy

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top