App Review AppGuard against Ransomware

It is advised to take all reviews with a grain of salt. In extreme cases some reviews use dramatization for entertainment purposes.
5

509322

My mistake. I mean Scan with..second opinion av

Second opinion scan is OK and all, but what if it doesn't detect anything because it has no signatures to detect with ?

It is better testing methodology to manually inspect what is running in active memory using Process Explorer, Process Hacker, System Explorer, etc. If you find something, then you can check for its autorun.

Also, check if anything placed inside Documents\My Private Folder or any other user-created Private Folders has been encrypted.

If anything else in User Space is encrypted - it isn't important - because after a ransomware infection, you will need to clean install the OS to start over with a known clean system.

The goal of AppGuard Private Folders is to protect user data - and that's it - but a user has to take full advantage of Private Folders.
 
Last edited by a moderator:

Duotone

Level 10
Verified
Well-known
Mar 17, 2016
457
Nice test...

Guarded ransomware can still encrypt C:\Users\* directories.
Even in lockdown?!

The goal of AppGuard Private Folders is to protect user data - and that's it - but a user has to take full advantage of Private Folders.
If I add a drive say F: and set it to protected would that suffice?! I store macrium images on that drive..
 
Last edited:
  • Like
Reactions: XhenEd
5

509322

If I add a drive say F: and set it to protected would that suffice?! I store macrium images on that drive..

Protected mode, at this time, does not block the execution of files with a proper certificate. However, the digitally signed ransomware would have to encrypt connected drives and specifically the Macrium image file type.

All this matters if you are paranoid. In that case, don't leave any external drives connected to the system all the time.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top