Ransomware can prevent you from accessing your computer and encrypt your files so you can’t use them. [1] Routinely backing up your files on a secured cloud service or external hard drive is your best defense. If you use an external drive, go offline during backups and keep the drive disconnected from your computer when you’re not backing up files. Install antivirus and anti-ransomware utilities, keep them updated, and enable automatic Windows updates. For the best shot at staying secure, avoid opening suspicious links or attachments, and make sure the websites you visit are secure.

Method 1
Method 1 of 4:

Backing up Your Files

  1. When used strategically, an external hard drive is among the most effective backup tools at your disposal. Only plug it into your machine when you back up files, and go offline during backups. [2]
    • If you keep your external drive connected to the computer while it’s online, it could become hijacked along with your computer during a ransomware attack.
  2. If you store your files with a service, like Carbonite, Dropbox, or OneDrive, you’ll most likely be able to restore any files hijacked during a ransomware attack. Just make sure your cloud storage service allows you to access earlier versions of your files, so you can recover the files as they were prior to the ransomware attack. [3]
    • Dropbox, for example, allows you to track changes made to all files within 30 days.
    Advertisement
  3. If you don’t already have one, create a consistent backup routine. If you work with important files every day, back them up on an external drive or with a cloud storage provider daily. [4]
    Advertisement
Method 2
Method 2 of 4:

Securing Your System

  1. In addition to an antivirus service, you should install a utility that specifically protects your machine against ransomware. [6] Two well-reviewed free options are Cybereason RansomFree and Malwarebytes Anti-Ransomware. [7]
    • Recommended paid versions include Bitdefender Antivirus Plus 2017 and Webroot SecureAnywhere Antivirus. A one year subscription for each service costs less than $20 (US). [8]
    • Windows Defender comes with Controlled Folder Access which blocks untrusted apps from writing to protected folders, including system directories and the "Music", "Videos", "Documents", "Pictures", and "Desktop" folders.
  2. Your operating system's security suite, antivirus utility, and ransomware blocker won’t be effective unless you update them regularly. [9] Nearly all ransomware attacks have targeted Windows, but a few have affected macOS. Regardless of your machine's operating system, install updates whenever they're offered. [10]
  3. Ransomware hackers can embed malware in advertisements on websites you’d otherwise trust. Enable a pop-up blocker on whichever browser you use to decrease your risk of clicking on a malicious advertisement. [13]
  4. Install your browser’s updates and patches whenever they’re released to keep it as secure as possible. [14] Like your operating software, your browser periodically releases updates that contain security patches. [15]
    • Your browser's pop-up blocker and unprotected website detector need to be updated in order to be effective.
    Advertisement
Method 3
Method 3 of 4:

Adopting Safer Internet Practices

  1. Ransomware typically spreads through malicious links or attachments sent via email. Stay alert, and never open an email, attachment, or URL that seems suspicious. [16]
    • For the best chance at staying secure, just don’t open anything from a company you don’t do business with or from someone you don’t know. If you have any doubts, don’t click it.
    • If you get an email with a subject such as “You’ll never believe this!” from a friend, you should send them a text or phone call to see if they actually meant to send the email.
  2. Before opening any attachment, you should make a habit of checking its file extension, which is the .doc, .pdf, or other abbreviation that’s listed after the filename. Before opening an attachment, right click on it and select the option to scan for malware from the drop-down menu. [17]
    • Avoid opening .exe files, or executable files, since they can run a ransomware application. If you do need to exchange .exe files legitimately, share them using a cloud service or in a password-protected ZIP file.
  3. Whenever you visit a website, make sure you see “https” at the beginning of its address. The “s” stands for secure, and indicates that the website is encrypted. [18]
    • If your session isn’t encrypted, any account that you sign into could be vulnerable. To protect your information, enter your passwords only into encrypted pages, avoid staying permanently signed into accounts, and use a different password for each account. [19]
  4. If you’ve clicked on something suspicious but a ransomware screen hasn’t yet appeared, disconnect from Wi-Fi or unplug your wired connection immediately. Encrypting files to hijack them takes some time, so if you act quickly you might be able to stop the ransomware application before it finishes. [20]
    • Disconnecting your machine can also help protect other computers on your network. In addition to disconnecting the infected computer, you should disable Wi-FI and Bluetooth on all machines within your network. [21]
    Advertisement
Method 4
Method 4 of 4:

Removing Ransomware

  1. 1
    Try using your computer's antivirus. Your antivirus may be able to remove the ransomware before it progresses to the point where it has deleted your files. Just note that if you got ransomware, your files are likely inaccessible even if you remove it.
  2. 2
    Restore your computer to an earlier point. Time Machine on Mac and File History on Windows can help reverse damage caused by ransomware.
    • Report the address to local authorities. They can seize the funds and return the lost money back to you, though this may be unlikely if you use a prepaid card.
  3. 3
    Reset your computer . You will lose all of the files, but you will no longer have the ransomware on your computer.
    Advertisement

Expert Q&A

Search
Add New Question
  • Question
    How do I avoid ransomware?
    Mitch Harris
    IT Expert
    Mitch Harris is an IT Expert based in the San Francisco Bay Area. Mitch runs his own IT Consulting company called Mitch the Geek, helping individuals and businesses with home office technology, data security, remote support, and cybersecurity compliance. Mitch earned a BS in Psychology, English, and Physics and graduated Cum Laude from Northern Arizona University.
    IT Expert
    Expert Answer
    Keep your operating system and software up-to-date. Also, pay close attention to anything you install, as well as any prompts that pop up on your screen.
  • Question
    How do I avoid ransomware on the web?
    Mitch Harris
    IT Expert
    Mitch Harris is an IT Expert based in the San Francisco Bay Area. Mitch runs his own IT Consulting company called Mitch the Geek, helping individuals and businesses with home office technology, data security, remote support, and cybersecurity compliance. Mitch earned a BS in Psychology, English, and Physics and graduated Cum Laude from Northern Arizona University.
    IT Expert
    Expert Answer
    Don't respond to alerts requesting a phone number or asking to install software. Most of these are bogus.
  • Question
    Are ads in my security software harmful?
    Mitch Harris
    IT Expert
    Mitch Harris is an IT Expert based in the San Francisco Bay Area. Mitch runs his own IT Consulting company called Mitch the Geek, helping individuals and businesses with home office technology, data security, remote support, and cybersecurity compliance. Mitch earned a BS in Psychology, English, and Physics and graduated Cum Laude from Northern Arizona University.
    IT Expert
    Expert Answer
    Probably not. If you're relying on free security software, the company is probably making money through other means, like advertising. Don't try hide from these ads—the better they know what you like, the more accurate (and less annoying) your ads will be. Learning how to deal with legitimate ads and how to avoid illegitimate ads is an excellent way to avoid malware.
See more answers
Ask a Question

      Advertisement

      Warnings

      • If you are ever infected with Ransomware, don't pay the ransom. There is no grantee that doing so will get your files back, and it just encourages hackers to keep making more ransomware0. [22] It is also illegal in the United States. [23]
      Advertisement

      About this article

      Thanks to all authors for creating a page that has been read 15,361 times.

      Is this article up to date?

      Advertisement