Ransomware: what LC9 does now, and what's coming

Available now in LC9 Free

• Detection of ransomware files that match LC9's signed definitions.
• Detection of programs and scripts that contain commands to delete Windows backups and restore points, which ransomware does so you can't recover your files.
• Quarantine, so a detected file can't run.

These work when you run a scan. They can stop ransomware that's waiting on your PC; they can't stop an attack that's already running.

Coming in LC9 Premium: Ransomware Shield

Ransomware Shield will watch for the behaviour itself: a program suddenly changing or renaming large numbers of your documents, or trying to delete recovery data. It will stop the program and alert you. It's in development and isn't available yet. We'll test it against safe ransomware simulations before it ships.

Your best protection: backups

No antivirus can promise to stop every ransomware attack. Keep a backup of important files on a drive you unplug afterwards, or in a cloud service that keeps previous versions. Then ransomware can't take them from you.