Salta al contenuto principale

Free Ransomware Protection?

Thread needs solution
Beginner
Messaggi: 1
Commenti: 1

Right now around this area Ransomware is all over the schools and on some of our break-fix clients. So, I found this Acronis Ransomware Protection (Known as ARP from here on) "FREE for Everyone". This seems too good to be true. I first heard about this on a webinar yesterday. I don't exactly understand how this works. I've read the KBs and other pages, but I'm still left unclear about this. I want to ask, "What's the catch?" I don't want to push this out to all my clients and it just be something extra on their PC or they get a pop-up for them to have to pay after 6 months or whatever. I just installed it on my PC and it almost seems too easy; it makes me nervous. 

When I installed it, it asked about a few processes. When ransomware gets on the PC and it pops up to asks if we want to allow this process, if we are not in front of the PC does the ransomware process keep running or does ARP stop it until checked good or not. (Thinking about servers)

The files that get hit with the ransomware, do they have to have been backed up with Acronis to be restored properly or does the ARP do some kind of restore? In the webinar it says you won't even know you've had ransomware with ARP installed. I want to know if I install this on a PC that they don't want to get backed up, like a patron PC at a library. They don't want it backed up, but if a patron using the PC opens a ransomware infection will ARP stop the infection and then revert the files or will it only revert if it was being backed up by Acronis?

If I don't setup the Acronis Backup when installing ARP and it's being backed up by Veeam will this just be an extra step I have to perform to restore the files? Will ARP stop the process and I have to use Veeam to restore the encrypted file?

 

0 Users found this helpful
Beginner
Messaggi: 1
Commenti: 1

#1

Apparently this is no longer needing to be addressed. I put this on a clean PC in a controlled Ransomware environment and the PC still got infected. The reason being, as far as I can tell, is that the Ransomware that was being used is using a Windows process and the ARP couldn't stop the process, because the process was needed for other things to run in Windows. ARP did alert me that it was happening, but then told me it couldn't do anything. Further testing is happening. Let me know if y'all have any answers or questions. Thanks.

Forum Moderator
Messaggi: 124
Commenti: 4762

#2

> I don't want to push this out to all my clients and it just be something extra on their PC or they get a pop-up for them to have to pay after 6 months or whatever. 

Acronis Ransomware Protection is free and unlimited in time. However, as a freeware it has some limitations - no technical maintenance provided, only local data protected. Files, stored on the local computer in a folder that is shared with others in the local network, are exposed to attacks from the network, especially if credentials to access the shared folder are compromised. For example, Active Protection module in Acronis True Image 2019 can protect network shares and NAS devices. 

> if we are not in front of the PC does the ransomware process keep running or does ARP stop it until checked good or not.  

The app should hold a suspicious process till Block or Trust is selected. 
 

> The files that get hit with the ransomware, do they have to have been backed up with Acronis to be restored properly or does the ARP do some kind of restore? 

During the process verification, Acronis Ransomware Protection will try to create the temporary copies of the affected files. Later you can recover these copies via Recover modified files. But this does not guarantee the 100 protection. We recommend having several backups of files in local and remote storage locations. 

See also 
How Acronis Ransomware Protection protects your data from ransomware
Protecting your data from ransomware