Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Inactive Support Threads
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Security
Video Reviews - Security and Privacy
More Fun with Ransomware Part 2
Message
<blockquote data-quote="cruelsister" data-source="post: 495098" data-attributes="member: 7463"><p>Snapshot applications like Rollback and AX64 are intrinsically protected from encryption by ransomware. In way of explanation, let's say you use Rollback and create a snapshot. When you install a program (or run ransomware) no changes are made to your actual system; Rollback, being integrated into your OS, will re-direct something that tries to write something to the disk to an empty sector of the disk. Windows is then "fooled" into thinking that system changes were made when nothing of the sort have occurred.</p><p></p><p>In short, anything you run on a Snapshot protected system (ransomware, trojans, legit applications, whatever) is actually being run in a virtual environment and can't touch anything that actually exists. Look at it like a sandboxing program that sandboxes everything all the time automatically.</p><p></p><p>Hope that was clear (but doubt that it was...).</p></blockquote><p></p>
[QUOTE="cruelsister, post: 495098, member: 7463"] Snapshot applications like Rollback and AX64 are intrinsically protected from encryption by ransomware. In way of explanation, let's say you use Rollback and create a snapshot. When you install a program (or run ransomware) no changes are made to your actual system; Rollback, being integrated into your OS, will re-direct something that tries to write something to the disk to an empty sector of the disk. Windows is then "fooled" into thinking that system changes were made when nothing of the sort have occurred. In short, anything you run on a Snapshot protected system (ransomware, trojans, legit applications, whatever) is actually being run in a virtual environment and can't touch anything that actually exists. Look at it like a sandboxing program that sandboxes everything all the time automatically. Hope that was clear (but doubt that it was...). [/QUOTE]
Insert quotes…
Verification
Post reply
Top