How can we stop ransomware files from executing if it is downloaded?!

Posted on 2016-11-16
1 Endorsement
Last Modified: 2016-11-29
hi guys,

Is there anyway of stopping Ransomware files from being executed? We've got Watchguard firewalls, for emails, yet I've seen ransomware files slip through the net and get opened.

Is there a free way of doing Ransomware prevention? Or if there are paid ones, any recommendations?

Question by:Yashy
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 20

Accepted Solution

Russ Suter earned 400 total points
ID: 41890118
There are ways to limit ransomware's ability to execute. You can set group policies that restrict applications from running in "unauthorized" places (like the AppData folder).

CryptPrevent attempts to automate this approach.

Assisted Solution

by:No More
No More earned 100 total points
ID: 41890123
LVL 54

Expert Comment

ID: 41890138
Russ' link is surely the best way. Please note that foolishIT uses built-in mechanisms that can also be controlled using group policy.
Those mechanisms are called "software restriction policies" (for the professional version of windows) or "applocker" for the enterprise or server version of windows.
What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.


Author Comment

ID: 41891332
Thanks for the help and feedback guys. I'll check out the foolishit site stuff and work on the content given.
LVL 54

Expert Comment

ID: 41891736
Do you have a domain? I guess you do.

Author Comment

ID: 41906118
Hey McKnife,

I do indeed have a domain:).

LVL 54

Expert Comment

ID: 41906165
Then why not use my recommendation but instead foolish IT? You don't need 3rd party software when you have a domain.

Featured Post

Webinar: Aligning, Automating, Winning

Join Dan Russo, Senior Manager of Operations Intelligence, for an in-depth discussion on how Dealertrack, leading provider of integrated digital solutions for the automotive industry, transformed their DevOps processes to increase collaboration and move with greater velocity.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

It’s the first day of March, the weather is starting to warm up and the excitement of the upcoming St. Patrick’s Day holiday can be felt throughout the world.
Many businesses neglect disaster recovery and treat it as an after-thought. I can tell you first hand that data will be lost, hard drives die, servers will be hacked, and careless (or malicious) employees can ruin your data.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question