Ransomware Protection

Just Released

FREE

Download

Free, battle-tested
defense against ransomware

Blocks attacks

Stop both known and never-before-seen ransomware

Recovers files

Access local cache to restore damaged data easily

Backup to the Cloud

Update your files automatically every 15 minutes

5 GB Cloud Free

Put your most important files out of harm’s way

Ransomware attacks someone every 10 seconds. Don’t be a victim. Our free tool delivers proven, powerful protection from ransomware like Petya, WannaCry and Osiris, and it’s completely compatible with all leading anti-malware solutions.

Constantly guards against bad behavior

Ransomware viruses can’t infect your system on Acronis’ watch. Our technology monitors your system in real-time, distinguishing normal activities from suspicious ones like unauthorized encryption. By recognizing bad behavior, it spots ransomware whether the strain is known or not.

400%

increase in new strains of ransomware this year

Immediately stops ransomware attacks

If a process is caught trying to encrypt your files or inject malicious code into your system, Acronis stops it before any damage is done. You’re instantly notified that something suspicious was found. Then you can either block the activity or allow it to continue.

$ 1,100 was the average ransom demanded in 2017

Easily restores any affected files

2 days is the average downtime
for companies

After blocking the ransomware attack, Acronis Active Protection will help you restore any files that might have been altered or infected. Our tool searches for the latest file versions and can recover clean copies from your cache, temporary files, or backup.

Automatically secure files in the cloud

With 5 GB of free cloud storage, you’ll not only protect your data during a ransomware attack, but also from disk failures, disasters and accidental deletions. Plus, cloud backups let you access your files from anywhere on any internet-enabled device. That’s extra protection with added convenience.

Reports of Ransomware Attacks

I’m actively searching for tips on getting rid of Osiris. A client got hit and she won't go for the ransom. We’re reloading the OS – it’s unfortunate that she has lost all her data

John S. Suffered from OSIRIS

I tried to pirate Photoshop CS6 and got infected by Cerber ransomware. I would prefer to remove it without paying obviously, but I don't see that happening. It doesn't seem to be removable

Alex F. Suffered from CERBER

They took my Bitcoin but did not provide any further communication. If there are others out there who are considering payment, you will never get the decryptor from the perpetrator

Paul S. Suffered from PETYA

Notorious Ransomware Attacks

WannaCry Ransomware

Impact:

Extreme – 300,000 infected computers worldwide

Status:

Active, patching the system could help in some cases

Report by curious PC user:

Can you explain how you might be infected by WannaCry?

Details:

Unlike many ransomware attacks, WannaCry was not spread by spam email. It became the fastest spreading attack – affecting 300,000 computers in more than 150 countries – by taking advantage of a vulnerability in Windows using an exploit leaked from the U.S. National Security Agency called EternalBlue.

Cerber Ransomware

Impact:

High, 100 000 of computers infected worldwide

Status:

No known decryption available (only from the hackers)

Report by home user:

I tried to pirate Photoshop CS6 and got infected by Cerber ransomware. I would prefer to remove it without paying obviously, but I don't see that happening. It doesn't seem to be removable.

Details:

Websites where you can download dubious content – such as stolen movies, music or software – are crawling with threats. For cybercriminals using ransomware, Cerber is the most common ransomware-as-a-service. A Trojan horse infects your system and encrypts your files, and demands payment.

Petya Ransomware

Impact:

Moderate, Thousands of computers infected in Ukraine

Status:

Active, patching the system could help theoretically

Report by anonymous cryptominer:

They took my Bitcoin but did not provide any further communication. If there are others out there who are considering payment, you will never get the decryptor from the perpetrator.

Details:

Remember that if you pay cybercriminals to regain access to your data, there’s no guarantee that you’ll get the decryption key. In fact one report estimates that of victims who have paid the ransom, only 47 percent ever received the decryption key.

Bad Rabbit Ransomware

Impact:

Moderate – 50,000 infected computers in US

Status:

Active, no known cure is available

Report by frustrated home user:

Is there any method for preventing a Bad Rabbit infection? Do anti-virus programs detect this threat?

Details:

Bad Rabbit is a variation of Petya (or GoldenEye) that hackers modified. Unfortunately traditional anti-virus solutions rely on “signatures” to identify ransomware, so if it’s a new strain it may not be recognized. That’s a problem since there’s a 400 percent growth in new strains each year.

AES-NI Ransomware

Impact:

Moderate – 50,000 infected computers in US

Status:

Active, decryptor utility is available from Eset

Report by system administrator:

At my company, someone got it in an email that was disguised as one of our clients and it encrypted his entire My Documents folder and all of the network drives he was connected to.

Details:

Like the WannaCry attack, the latest AES-NI variant uses the NSA’s leaked EternalBlue exploit to infect other computers. Microsoft released a patch to address the vulnerability that exploit leverages, yet it continues to spread. Applying software updates and patches is a critical step to avoid being a victim of ransomware.

Osiris Ransomware

Impact:

High, 100 000 of computers infected worldwide

Status:

Active since 2016, cure is not found

Report by IT professional:

I’m actively searching for tips on getting rid of Osiris. A client got hit and she won't go for the ransom. We’re reloading the OS – it’s unfortunate that she has lost all her data.

Details:

Osiris is a difficult to detect variant of the Locky crypto virus. Usually spread by spam, it infects local devices and spreads across networks. It’s also proof that ransomware crooks targeting backup solutions, since Osiris directly attacks and deletes Microsoft Volume Shadow Copy Service (VSS) files.

Acronis Ransomware Protection

Don’t be a victim. Our proven defense is free

Free

Get it Now

End-user license agreement

Operating systems: Windows 7 SP1, 8, 8.1, 10

Free, battle-tested defense against ransomware

Constantly guards against bad behavior

Immediately stops ransomware attacks

Easily restores any affected files

Automatically secure files in the cloud

Reports of Ransomware Attacks

Notorious Ransomware Attacks

WannaCry Ransomware

Cerber Ransomware

Petya Ransomware

Bad Rabbit Ransomware

AES-NI Ransomware

Osiris Ransomware

Acronis Ransomware Protection

Free, battle-tested
defense against ransomware