?
Solved

How can we stop ransomware files from executing if it is downloaded?!

Posted on 2016-11-16
7
Medium Priority
?
173 Views
1 Endorsement
Last Modified: 2016-11-29
hi guys,

Is there anyway of stopping Ransomware files from being executed? We've got Watchguard firewalls, Symantec.cloud for emails, yet I've seen ransomware files slip through the net and get opened.

Is there a free way of doing Ransomware prevention? Or if there are paid ones, any recommendations?

Cheers
Yashy
1
Comment
Question by:Yashy
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 20

Accepted Solution

by:
Russ Suter earned 1600 total points
ID: 41890118
There are ways to limit ransomware's ability to execute. You can set group policies that restrict applications from running in "unauthorized" places (like the AppData folder).

CryptPrevent attempts to automate this approach.

https://www.foolishit.com/cryptoprevent-malware-prevention/
0
 
LVL 7

Assisted Solution

by:No More
No More earned 400 total points
ID: 41890123
1
 
LVL 56

Expert Comment

by:McKnife
ID: 41890138
Russ' link is surely the best way. Please note that foolishIT uses built-in mechanisms that can also be controlled using group policy.
Those mechanisms are called "software restriction policies" (for the professional version of windows) or "applocker" for the enterprise or server version of windows.
1
NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

 
LVL 1

Author Comment

by:Yashy
ID: 41891332
Thanks for the help and feedback guys. I'll check out the foolishit site stuff and work on the content given.
0
 
LVL 56

Expert Comment

by:McKnife
ID: 41891736
Do you have a domain? I guess you do.
0
 
LVL 1

Author Comment

by:Yashy
ID: 41906118
Hey McKnife,

I do indeed have a domain:).

Yash
0
 
LVL 56

Expert Comment

by:McKnife
ID: 41906165
Then why not use my recommendation but instead foolish IT? You don't need 3rd party software when you have a domain.
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any more questions? Just ask.
What's worse than having your data encrypted by ransomware? Getting attacked by a so-called "wiper," which simply destroys the data and offers you no hope of ever seeing it again.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question