RansomWhere?

RansomWhere?

Generic ransomware detection

Description

The cruel part about ransomware is that by the time you notice, your files are already encrypted — and signature-based antivirus always lags, letting new strains slip through. RansomWhere? takes another angle: it doesn't care who it is, it just watches for a process rapidly encrypting your files and freezes it the moment that behavior shows up.

Features



Behavior Monitor: Watches for a burst of file encryption activity.

Untrusted Focus: Ignores signed apps, flags only unknown programs.

Instant Block: Suspends the offending process on detection.