Ransomware is the most dangerous malware of all, as it can cause enormous economic damage if all necessary precautions are not taken. Cybercriminals usually target companies to get higher ransom earnings, but in some cases the attack can be carried out against private users. AV-TEST has published a detailed analysis on the main antiviruses capable of detecting and blocking ransomware.
Best Antivirus for Ransomware
With a few exceptions, almost all ransomware is dropped on the victim’s computer at the last stage of the infection chain. The first goal of cybercriminals is to gain initial access, often through phishing. The attachment to the e-mail message can be an archive that contains a macro Office document, an executable, or an .lnk file.
When the user opens the document, launches the executable or clicks on the link, the infection begins. The persistence is created (automatic start) and the local and network drives are scanned. The data is then collected and sent to the remote server, the ransomware downloaded, the files encrypted, and a text file with instructions for paying the ransom is displayed.
In low to the tests carried out by AV-TEST, considering 10 different scenarios, almost all antivirus have detected and blocked the infection at the initial stage (phishing) or at most during the second stage (execution). The products tested are those of Avast, AVG, Bitdefender, F-Secure, G DATA, K7 Computing, Kaspersky, Microsoft, Microworld, NortonLifeLock, PC Matic and VIPRE Security.
Despite being free, Microsoft Defender (windows security) offers great protection against ransomware. The Redmond company has therefore done a good job developing and updating its antivirus.
Windows Security (Microsoft defender) offer the following tools that protect your device and your data:
- Virus & threat protection – Monitor threats to your device, run scans, and get updates to help detect the latest threats. (Some of these options are unavailable if you’re running Windows 10 in S mode.)
- Account protection – Access sign-in options and account settings, including Windows Hello and dynamic lock.
- Firewall & network protection – Manage firewall settings and monitor what’s happening with your networks and internet connections.
- App & browser control – Update settings for Microsoft Defender SmartScreen to help protect your device against potentially dangerous apps, files, sites, and downloads. You’ll have exploit protection and you can customize protection settings for your devices.
- Device security – Review built-in security options to help protect your device from attacks by malicious software.
- Device performance & health – View status info about your device’s performance health, and keep your device clean and up to date with the latest version of Windows.
- Family options – Keep track of your kids’ online activity and the devices in your household.