Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Free anti-ransomware utility, what would you recommend?

Apr 28, 2017 5:33PM PDT

Hello,

My question relates to ransomware. I try to follow best practices when it comes to ransomware. I do not open email attachments when I'm not absolutely sure they are legitimate (going so far as to call / email the "senders" - if I recognize them as friends - to verify they actually sent the mail). I take daily, incremental backups of my computer and store them on a NAS device (I know - many ransomware variants will encrypt the NAS device too). And, in addition to my anti-virus program, I use an anti-ransomware product to help mitigate the risks.

I'd like to hear opinions from your readers on what they consider the best *FREE* anti-ransomware product. I don't have a sandboxed environment where I can safely test ransomware threats to see if my defenses would be effective, and I'm hoping some of your readers have done extensive research on the subject. I have at some point used the anti-ransomware products from Malwarebytes, BitDefender, and Cyberreason. I have not tried Kaspersky's tool yet. Thank you!

-Submitted by Jack E.

Discussion is locked

- Collapse -
Personally I Don't Use Free
Apr 28, 2017 6:18PM PDT

I have a paid lifetime subscription to Malwarebytes. I have a few other tools as well and they all co-exist peacefully so I like to think I have some defense in depth. I too run backups and I unplug my drives when not backing up and use a cloud backup for additional safety for critical data.

But I don't trust free...

- Collapse -
Malwarebytes anti-ransomware
Apr 28, 2017 9:02PM PDT

Malwarebytes anti-ransomware was one of the products I tested. I stopped using it because it was apparently in BETA, and they advised not to trust production systems with the program. I'll have to check to see whether their product is now out of BETA.

- Collapse -
Out of BETA
May 5, 2017 9:01PM PDT

I use Malwarebytes Premium. Their anti-ransomware is now incorporated in the main program which provides real time web,exploit,malware and ransomware protection.
I also use Zemana Antilogger for protection against key logging and code injection.

- Collapse -
Re: Out of Beta
May 5, 2017 9:07PM PDT

Thanks for that info. Does the anti-ransomware component only come with the premium product or also their free product?

Your answer about the anti key logger is also welcome - and should be posted again in response to this week's Community Forum question!!!

- Collapse -
Duh!
May 5, 2017 9:11PM PDT

I asked a pretty dumb question above....

Anti-ransomware software has to be running continuously to be effective, and the free version of malwarebytes product is a user-initiated scanner, so I guess even if there's anti-ransomware in the free version, I question how effective it would be.

- Collapse -
Paid Malwarebytes Premium Versus Paid Avast?
May 6, 2017 8:57AM PDT

I have been using the free Malwarebytes program and also the Avast free version. I was wondering if you or anyone else might be familiar with Avast's Premium version? Although I have been perfectly happy--and safe--using the free versions, I am considering going to a paid version of one of these two programs (especially after reading many of these comments)! Malwarebytes seems to be cheaper for a year's worth of protection, although Avast has a few different paid versions so I'll have to look a bit deeper to see if their cheapest version may offer more protection and worth the extra money over Malwarebytes.

I'm also not familiar with Zemana Antilogger, so I will also check this out, too.

Thank you for your

- Collapse -
Malwarebytes vs. Avast
May 6, 2017 10:33AM PDT

For me personally, I've been happy with the free version of Avast for my home computers, as well as the free Malwarebytes for user-initiated detection/removal of items that may not have been caught by Avast.

Avast paid version (Internet Security version) has a few features not in the free version, including firewall and spam protection. I personally don't think it's worth the cost (for a non-commercial entity), since your router's firewall, together with Windows standard firewall are adequate for most incoming threats. Outgoing firewall protection is good at blocking apps that try to "phone home" without permission, but if you're careful about what you install, that's not as important.

Although I trust Malwarebytes implicitly (it's got a great reputation for detection/removal), it doesn't seem to be tested against standard anti-virus products because it considers itself an anti-malware solution. So I don't know of many objective head-to-head comparisons that I can reference to make a recommendation.

What I can say is that a major anti-virus product beginning with a "K" is a wicked-good product year after year, and that's the one I recommend to my corporate clients.

- Collapse -
Use both pd anti malware bytes n avast paid antivirus
May 6, 2017 8:58PM PDT

I use both free n paid versions of anti malwarebytes and super antispyware, n paid avast antivirus (which I like bc it does complete checkup of software on my Pcs and any issues n driver updates, etc). Also use keyscrambler (free version). First thing I do after pc is on, I run the free ccleaner to clean up any incompatibilities or issues with pc though. I also have a cloud backups and also do manually backups regularly.

I rarely share flash drives n if i am not sure about a file or portable had, I run the antivirus scan on it before I do anything. Once someone gave me a DVD and I ran it on the DVD player. It corrupted the machine. Was glad I didn't put it in my pc! So be wary of anything you get from others, files, downloads, links, etc.

- Collapse -
Thanks for the tips
May 9, 2017 7:33PM PDT

Like you, I have been happy with the free Avast and free Malwarebytes. But after reading some of the posts I was wondering if my information might be old (although I get a lot of tech security newsletters, I've had 5 spine surgeries in the last 3 years and haven't been up-to-date on reading them like I used to be). I remember reading on several tech sites through the years that many of the free programs ranked right up there with the paid versions, some even outranking the paid versions of some of the bigger name programs. It seemed they'd exchange the top 3-4 spots year after year between each other--Avast, AVG, Kaspersky, and at one time Comodo (again, all free versions). I haven't heard anything about Comodo for some time now so I'm not sure if it's even around anymore? I also remember a few years back the free AVG was downgraded because tech experts felt they weren't putting effort into their free version any longer. But I believe that's even changed since then because I think their free version rates higher again.

After reading many of the other posts, in your opinion, do you feel I'm safe enough sticking to the 2 free programs I use? BTW...I also run SUPERAntiSpyware at least once a week too.

I also wouldn't mind hearing the specific reasons from those who say they would never rely just on free programs. The web is a scarier place everyday and the "bad guys" are always a step ahead of the good guys; so if it's worth the money I would definitely spend it to stay safe. It's just that I personally know several people who paid for security programs and have had problems (although it may be their own unsafe actions that caused them).

Thanks again!

- Collapse -
FREE vs paid..
May 11, 2017 6:53PM PDT

Actually my clients do quite well using free utilities, but part of that is that they use my defense in depth model. The only paid one I recommend is Malwarebytes, because you need the real time protection to get the benefit of this anti-malware product. Can you get by without it? Yes, I'd say so, but you'd have to have several free anti-malware solutions in place, to make up the difference. Each of these solutions use completely different methods to arrive at the same goal.

This does not mean there aren't many other good free tools out there that don't have real time protection; it is just that MBAM has unique features and holds an excellent position in the market, and they have the more reasonable prices too.

There are very few one size fits all paid for suites that I can recommend, and that is because I've learned long ago that they are a disaster. There are only two exceptions to this, IMO. Reading the CNET reviews by the users is a good way to find out what is up in this market.

- Collapse -
the best free one is you
Apr 28, 2017 6:31PM PDT

as long as you stay away from the red light district, as long as you stay away from illegal streaming and download sites, if you practice safe surfin, then you will not have a problem. Just keep a good backup of your data or an image of your system so if something should happen, you can get going again within hours. IMO, all you need is windows defender, a browser adblocker, and the free version of malwarebytes.

at this time I do not have a problem with ransomware. I have run across it many of times where it would popup, say my system is locked, and say I need to contact soso so my system can be unlock. What I use is Linux Mint instead of windows operating system. Unless you are a gamer, I would suggest checking out Linux as a good operating system where at this time, you do not have to worry about viruses, malware and ransomeware.

- Collapse -
Linux as an alternative
Apr 28, 2017 8:50PM PDT

Thanks for the suggestion. I use Linux (Ubuntu) on several of my systems, but I also keep various Windows distributions handy as resources for my business. It's helpful if I can reproduce some of the symptoms described by my clients, so I keep all versions of Windows (from XP through Windows 10) on at least one computer. I follow best practices on my own computers, but want to know what people suggest for those of my clients who are not as careful.

- Collapse -
stay off the net period :)
May 5, 2017 6:03PM PDT

And as long as you stay away from search engines too. In fact, staying off the Internet is the best bet.

- Collapse -
Not helpful
May 5, 2017 6:21PM PDT

This kind of response is not helpful.

- Collapse -
not helpful only if staying on the Net is needed
May 5, 2017 6:31PM PDT

Yes and no. If you truly want to be safe, than that is the only way.

If you want to take risks, the other options are available.

- Collapse -
Re: Stay off the internet
May 5, 2017 8:33PM PDT

It's funny... I have a client who does not use the internet. He's pretty much stuck with his Windows 95 computer, since it was one of the last Windows OS's that didn't require internet-based activation of the license. Finding hardware to keep his system running smoothly is a bit tricky, but he's happy to continue playing games (purchased on 3.5" floppy disks) from the 90's.

Sometimes, I envy him Wink

- Collapse -
Don't buy a computer
May 6, 2017 7:15AM PDT

And yet kagekiha is here posting a response on the internet. How about you just don't buy a computer. Its about as dumb a response as kagekiha's. What about email? Is that allowed in your little world because a most ransomware comes from email.

- Collapse -
Meaningless answer.
May 6, 2017 12:04PM PDT

Better yet, why don't you STAY OFF from this tread? Your contribution is as good as a three dollar bill !

- Collapse -
Totally Agree
May 5, 2017 8:13PM PDT

Yes, users have to learn to close a web page when in doubt.
Put spam or any other questionable email in a junk or spam folder so the address will be blocked permanently.
You might think you are on a safe page sometimes but when a window pops up saying this is Microsoft and we need to scan your computer for potential problems, close the page immediately.

I personally have a well known internet security program running all the time. Shut off your computer when not in use during the night or day for that matter.

I also use a separate outside utility that Cleans my browser and cleans my registry, I will let you guess what program that is.

I also use a utility that searches and destroys any issues such a spying.

Over the years these common sense practices have never failed me.

You also have to watch out for Microsoft itself for they seek to find out everything you do, every minute of every day, it's up to you to prevent that the best you can.

Checking your system weekly or daily is highly recommended.

- Collapse -
Re: Your software
May 5, 2017 8:35PM PDT

I love the way you skirted the issues of identifying your software by loosely alluding to the titles.

- Collapse -
Yep, smart move.
May 6, 2017 4:40AM PDT

It's a variant of the burglar alarm trick. Buy a Brand A system, then put up a sign, "House protected by Brand B". Takes care of bad guys who might know a 'back door' for A.

- Collapse -
Really???
May 6, 2017 6:06AM PDT

You're "SO WORRIED" about Microsoft, oh my! Shocked I hope you have absolutely NOTHING GOOGLE on your machine(s). Laugh Grin If you think MS is spying on you DO NOT look at your Gaggle software!! Devil Angry Cry Shocked ANYTHING GOOGLE is Mega ET PHONE HOME!! MS looks like a rookie compared to Google!!

- Collapse -
Outside utility that Cleans browser and registry?
May 9, 2017 8:43PM PDT

I wish you wouldn't make me guess what the program is? I'm following this thread to find out the latest programs that people feel work best, as well as how people feel about "pay versus free" versions of programs. I'm really curious to know the program you personally use that cleans your browser and your registry and if it's a free program or a paid. Some also have 1-2 separate paid versions (like "pro" and "premium" etc.) that offer different features, and if it's a paid version I'd also be interested in knowing the exact version?

Thanks!

- Collapse -
Be a Safe User
May 9, 2017 8:15PM PDT

I do try to be careful where I go online and never click on links--even if a friend emailed it or posted it on Facebook or anywhere else. I also don't accept "friend" requests from anyone I don't know on Facebook or other social media sites until I either check their timelines/pages to see if we may belong to any of the same groups or have mutual friends, interests, etc.. I also use "HTTPS Everywhere" and try to confirm that I am on a site using https and not just http. But hackers are so good at replicating real legitimate websites these days that I still get scared. And I admit that sometimes I forget to check that "https" is the address (and some sites don't have that address available).

I tried installing Linux about a year ago, but something went wrong and I never got it working (and I downloaded the version that was supposedly the easiest to install and use according to tech websites--is it "Mint"?). I think of myself as an "intermediate" user, but there are some things I'm just afraid to delve into so I've stuck with Windows ever since.

I'd just like to stay as safe as possible online. And if most of you think I'm safe using the free programs I'm already using, then I'll save my money and continue to use them and practice careful browsing (although I'm going to get the 2 other free programs that were mentioned in this thread. OK--maybe I AM just a bit paranoid)! Wink

I do thank everyone for their input. It's been very helpful to me, and I'm sure to many others as well.

- Collapse -
Here's what I do
Apr 28, 2017 6:35PM PDT

#1 back up all of my data onto an External USB drive once a week (I happen to use Wllway Sync). I then disconnect the drive from the computer so it can't be infected.

#2 I do an image backup onto an External USB drive of the operating system disk once a month. This too is disconnected to protect it.

If I am hit with ransomware I would format my hard drives and restore them from my backups.

- Collapse -
Disconnecting devices
Apr 28, 2017 8:58PM PDT

As mentioned, I do daily incremental backups of my entire system (bare metal restores are supported). However, I really can't afford to go around disconnecting all my devices, since I'd probably forget to plug them in when backups are required.

- Collapse -
Turn on/off device automatically
May 6, 2017 5:36AM PDT

I have my USB backup plugged into an electronic timer.
The drive is only on for a brief period each day when the backup (EaseUs) is scheduled.

- Collapse -
Re: Automatic power-on of USB device
May 6, 2017 11:58AM PDT

So, I'm curious...

Which version of EaseUS do you use? Do you use the "backup when device is plugged in" option to begin your backup, or do you simply power on sufficiently ahead of your scheduled backup?

If you ever use their support forum, you may find me lurking there Wink

- Collapse -
EaseUS has failed my clients..
May 6, 2017 1:28PM PDT

I've never had a recovery fail using Macrium Reflect. It even does incremental image backups. Most of what it does is free, and I don't really see the advantage of using the paid version, other than it uses the Windows environment to recover with - so that may help when doing Windows 10 recovery.

From your responses, you might try just using the built in Windows backup for your incremental services(they've never failed me either), and be aware that malware may stay in those backups in sleep mode waiting to pounce on the system. At least if you use another external drive to do a monthly image that may help avoid that - perhaps even better, add another drive with 3 month intervals. This way you can lower your chances that the Ransomware isn't lying dormant in the files some where. Although I have successfully recovered infected backups when using hard drive based external drives, by scanning them with AV or AM products like those already mentioned.

However I'd like to take this opportunity to recommend the best ever free anti-ransomware I've ever used, and that is Crypto-Prevent from Foolish IT. It has gained a rock solid reputation at bleepingcomputer.com, and may even be rated here on CNET - I'm not sure. I just go to the authors site to get it. It requires updating occasionally, so keep that in mind, It is easy to do, by simply opening the console for it to check for updates. It is a very POWERFUL tool, because it takes advantage of the Windows Microsoft Management Console to stop any changes not normally needed in daily operation. It will occasionally pop up when it is something I'm trying to modify, and I simply click OK to continue my file modifications. But it you see it popup for no reason you know it is suspicious. I've already seen it in action in my ********* lab, and it successfully prevented the encryption and take over of my lab target PC.

Good luck with your search!

- Collapse -
Re: EaseUS failed
May 7, 2017 6:20AM PDT

I've personally had good experiences with EaseUS, but I have seen people in the support forum that have said it didn't work for them. I used to use Macrium Reflect (Free), and I can't remember why I stopped using it because it was so many years ago.