Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Free anti-ransomware utility, what would you recommend?

Apr 28, 2017 5:33PM PDT

Hello,

My question relates to ransomware. I try to follow best practices when it comes to ransomware. I do not open email attachments when I'm not absolutely sure they are legitimate (going so far as to call / email the "senders" - if I recognize them as friends - to verify they actually sent the mail). I take daily, incremental backups of my computer and store them on a NAS device (I know - many ransomware variants will encrypt the NAS device too). And, in addition to my anti-virus program, I use an anti-ransomware product to help mitigate the risks.

I'd like to hear opinions from your readers on what they consider the best *FREE* anti-ransomware product. I don't have a sandboxed environment where I can safely test ransomware threats to see if my defenses would be effective, and I'm hoping some of your readers have done extensive research on the subject. I have at some point used the anti-ransomware products from Malwarebytes, BitDefender, and Cyberreason. I have not tried Kaspersky's tool yet. Thank you!

-Submitted by Jack E.

Discussion is locked

- Collapse -
On Topic
Apr 28, 2017 9:57PM PDT

I think what you're seeing in the responses is on topic. Anti-ransomware is unlikely to protect you 100% and the results are so devastating that a good backup method is the answer.

- Collapse -
Re: On Topic
Apr 28, 2017 10:51PM PDT

You're right that backups are best practice for mitigating the damage of a ransomware attack. And, if my question was "How to I protect myself from ransomware?", all these responses would be applicable.

However, I've specifically asked for feedback from users of anti-ransomware software. Even with best practices, another layer of protection (beyond anti-virus) can be useful. It only takes one inadvertent click to accidentally release a ransomware attack. I'm looking for opinions on which anti-ransomware software is most effective.

- Collapse -
you are completely missing the point
Apr 29, 2017 12:09AM PDT

none of them are the most effective. It all depends with the person on the computer, the software running on the computer, and the hardware. You can go to 10 different tech sites that have reviews and you will not one will agree with the order of the top 10 let alone the top three. In addition not one of them will be 100 percent effective because nothing will protect you from that one wrong click. Remember in most cases, clicking on any link or ad gives the computer permission to bypass all security on your computer.

One thing though, you ARE getting answers from users. sorry you do not like or don't understand the answers you are getting.

- Collapse -
Cybereason's RansomFree
Apr 29, 2017 5:52AM PDT

I put this on my most used machine to test it a couple of months ago. Most times I can spot a potential problem but knowing this will stop it before it gets too far is comforting. Ransomware is a real problem for companies these days since the hackers have graduated from individuals. I have backups and 4 other machines so I'm not totally done in when it ransomware strikes. When it does all you can really do is a multiple military spec delete on the hard drive, roll back the bios then update it, and hope it hasn't contaminated the memory.

- Collapse -
re: RansomFree
May 5, 2017 8:13AM PDT

Thanks, baggage1. RansomFree is the one I'm currently using. Initially, I didn't like that it had to be completely uninstalled to do upgrades, but that has been improved.

- Collapse -
Memory?
May 5, 2017 5:49PM PDT

Memory is cleared on power off.

- Collapse -
Another Non-Answer for you John
Apr 29, 2017 6:37AM PDT

I have not used any of the products you asked about i.e Malwarebytes, BitDefender, and Cyberreason for Windows ,but I agree with you that unless folks HAVE used these , folks should not leave answers that aren't pertinent .
I'm sorry to have wasted your time by posting another Non-Answer , but I wanted you to know that there are others refraining from posting things we have no knowledge of.

- Collapse -
Sorry
May 4, 2017 4:12AM PDT

John should read Jack

- Collapse -
Re: Sorry
May 5, 2017 8:14AM PDT

Thanks for the support, itsdigger. And you'd be surprised how many people think my "proper" name should be "John" Happy

- Collapse -
WinPatrol Makes a Very Effective One
Apr 29, 2017 9:14AM PDT

WinPatrol's anti-ransomware utility is called WAR. It's designed to protect all vulnerable areas of a computer, both PCs and laptops. They sell lifetime licenses or 1 year. I would suggest trying the 1-year option which costs $20 to $30 depending on how many computers you want to protect. From experience, I think you'll find that before the year is over they'll offer you a deal to upgrade to a lifetime license. WinPatrol did a lot of beta-testing in the field before releasing this program, and it's very effective.

- Collapse -
Re: WinPatrol
May 5, 2017 8:16AM PDT

Thanks, gaucherre, I had not been aware of WinPatrol's product. Although it's not free, it doesn't seem to be too expensive. I'll have to check whether they have a free trial.

- Collapse -
WinPatrol free version exists
May 5, 2017 7:25PM PDT

I have been using a free version of WinPatrol's Anti Ransomeware (WAR) for around six months and it's working well, catching everything suspicious and more. I say "and more" because it's a bit too aggressive perhaps, in that it pops up a warning when I launch some existing programs on my pc that I've used for a long time, but the warning popup includes the option to tell WAR that the application it's alerting me about is ok, intentional, and to allow it to "open next time".
I do a lot of graphic design and editing, so I have quite a few programs which I use only rarely. It was a bit annoying at the beginning, when doing some work, to launch a program or application twice, but once told the program is ok, and to "open next time", WAR "learns" and no longer pops up an alert about it, unless of course an update might have changed a given program so much that WAR sees it as new.

- Collapse -
Re: WinPatrol free
May 5, 2017 8:39PM PDT

Thanks, ronc2. I hadn't had a chance yet to visit the WinPatrol website. If they have a free version of WAR, it may be worth checking out!

- Collapse -
Re: WinPatrol "learning"
May 5, 2017 8:58PM PDT

Many years ago, when ZoneAlarm was first introduced, I used to be fascinated by the frequency of interruptions, and how, over time, it "learned" what was acceptable. Your description of "WAR" reminds me of that. I stopped using ZoneAlarm when CheckPoint bought the product and started introducing feature bloat.

- Collapse -
WAR now accepts immediately, not just next time
May 6, 2017 1:25AM PDT

I use the paid version of WinPatrol WinAntiRansomware (WAR). In a recent update, they eliminated the extemely annoying "Accept next time" button, so now you can accept a program and it will run right away.

- Collapse -
Look at comparisons and testing
May 1, 2017 4:56PM PDT

Jack -- I won't step on the community's recommendations here but have some resources to share Happy

With any solution, free or paid, you want to make sure that you're using something that provides more than just "basic" or "bare bones" protection. Ours uses new technology in Behavior Shield and CyberCapture that helps stop ransomware -- even something that's never been seen -- before it can do any damage to your system.

AV-comparatives has some great real-world testing results you can take a look at to get an idea of detection rates and performance across your options while you are deciding!

- Collapse -
Re: Avast
May 5, 2017 8:21AM PDT

I have been a supporter of Avast for many years, recommending it to many of my personal clients. Despite it not being the most effective free product (historically through AV-comparatives), I appreciate that it is not as aggressive as other products in terms of suggesting that free users buy a license.

I have to say I was disappointed with the removal of your remote assistance option, but that's water under the bridge. I haven't read about CyberCapture very closely, so I'll have to give that a look.

- Collapse -
Re: Re: Avast
May 5, 2017 12:06PM PDT

We appreciate your support Happy Check out Behavior Shield also. Here's a great article that explains the new features of the 2017 version:

https://blog.avast.com/the-core-security-components-of-avast-2017

I have seen other mentions regarding the remote assistance feature and will make sure to pass this on to the developers and our product teams. Thanks for your feedback!!

- Collapse -
Today's malware
May 6, 2017 2:15PM PDT

Is too difficult to find using old obsolete definitions. Avast doesn't always get high marks, just because it may not immediately find malware in the app-data or temporary files because the criminal coders are getting smarter, and they put them to sleep to act as a ticking time bomb waiting for an opportunity to strike. I think it is really unfair how Avast has been treated in the test agencies because of this, when it is almost 100% effective at catching any malware(virus) that does actually attempt to activate and do malicious things to your PC system. This has always been the case, and I found in my honey pot lab, that very few of the paid for anti-virus suites can beat even the free version of Avast. I am not a paid shill for Alwil software, and an only a promoter of safe computing for my clients, who are almost all indigent and cannot afford to buy anything to protect their computer, and in fact a lucky they can afford a computer and network at all.

- Collapse -
Cybereason Ransomfree
May 5, 2017 5:52PM PDT
- Collapse -
Bleeping reviewed it.
May 5, 2017 5:55PM PDT
- Collapse -
Re: Methodology
May 5, 2017 6:40PM PDT

Good article. I would call it an analysis - not a review. The method described is almost security by obscurity since ransomware could be designed to avoid honeypots. Thanks!

- Collapse -
Hmm..interesting..
May 6, 2017 2:26PM PDT

I think I like the free Cryptoprevent better - also introduced on bleepingcomputer some time ago. It is pretty hard to get past the MMC if malware try to circumvent the rules. A guy could go and get snap-ins from Microsoft and write a lot of the hundred or so rules to do this himself. but I'd rather just download the free one! This is pretty powerful stuff and turns the operating system into a rampart against attack Happy

- Collapse -
Re: CryptoPrevent
May 7, 2017 6:31AM PDT

I'm definitely going to look that one up. As an aside, I see that Ransomware has updated itself today - coincidence?

- Collapse -
Oops!
May 7, 2017 6:32AM PDT

I meant RansomFree has updated today - LOL!

- Collapse -
Re: Ransomfree
May 5, 2017 6:59PM PDT

Thanks. That's what I'm using now.

- Collapse -
Linux is your friend (the Internet, not so much)
May 5, 2017 6:11PM PDT

My solution is not totally different from some of the others here, but is a plan and not a product.
No product can stop all malware, and no product can ensure protection from all ransomeware.
My plan is
#1 run Linux. There is less malware that can affect it, you can load some of the very best versions for free, and it is POWERFUL compared to Windows.
#2 browse and email from container or 'sandboxed' applications to limit damage to those containers. The internet is not your friend, so isolate your access in self defense. This is easy using free Linux and GNU tools.
#3 back up your system often, and have the backups offline. Even better, always have a copy off site. Malware cannot corrupt it if it cannot reach it.
#4 rotate backups using a generation plan. (I use a BURP server, compressed and de-duped backups take less space and the entire BURP volume of multiple backups of multiple machines can fit on a tape! Saves money, time, and worry!)
#5 test a backup by restoring and making sure you get a running system. Every other month should do.

If you get your drive encrypted by ransomware despite your precautions, just blow the drive away (reformat) and restore from backup and laugh at the poor sap waiting out there for your money to come to him.

PS. the same kind of system would work for Windows, except that Windows tools for the process may not be free, Windows is not free, and there are problems with the Microsoft licensing and re-registering the system that can be fatal.

I do wish Microsoft would fix that.

- Collapse -
Image your drive
May 5, 2017 6:23PM PDT

I image my drives to an usb backup drive once a week or so. Use paragon freeware and it is excellent.
The latest microsoft designers update ruined the use of it. So I restored an earlier image and say no to the update when it shows. There is an paid version that supports the update as it changed the file system.
Anyway all you do is boot off the USB paragon thumb drive and point to the USB backup drive and and off you go. All restored.

- Collapse -
Creator's Edition
May 5, 2017 6:48PM PDT

I hate that Microsoft has been forcing updates. Creator's Edition is a mixed bag...

Although I'm leery of updating, this edition restores your ability to block future updates. I'm trying to put off the update for as long as possible.

- Collapse -
Use appsamvid
May 5, 2017 6:46PM PDT

Use appsamvid.
Appsamvid is a whitelisting software that scans applications either during installation or after installation, and it whitelists all trusted programs, blocks everything that is not in the whitelist, so no ransomware will ever be able to do anything to the computer. Appsamvid is free.
https://cdac.in/index.aspx?id=cs_eps_appsamvid
See appsamvid user guide on how to use the software.