Windows Security's "Ransomware protection" is about as much of a PITA as[...]
User Account Control.
What do YOU think about Ransomware protection?
John C. <r9jmg0@yahoo.com> wrote:
Windows Security's "Ransomware protection" is about as much of a PITA as[...]
User Account Control.
What do YOU think about Ransomware protection?
Not much. On my Windows 11 system, 'Controlled folder access' is *off*
and I don't think I turned it off, so I assume 'off' is the default.
I also checked on my wife's Windows 10 system and 'Controlled folder access' is off on that system as well. So the default *is* 'off',
because I would never lessen security on that system.
Windows Security's "Ransomware protection" is about as much of a PITA as
User Account Control.
Windows Security's "Ransomware protection" is about as much of a PITA as
User Account Control.
I have this protection on, but man, I really don't like the way it
blocks so many of the programs I have on my system from doing things.
To allow an "app" (God I hate that corruption of the word APPLICATION), here's what you do (in case you don't know):
1. Open Windows Security
2. Click on "Virus & threat protection"
3. Scroll down all the way so that you can see "Ransomware protection"
4. Click on "Manage ransomware protection"
5. Under "Controlled folder access" (which at this point should be in
the "On" position), click on "Allow an app through Controlled folder access" 6. Click on the "Add an allowed app" button
7. Take it from there to add an application to the list.
Does this PITA actually outweigh having Ransomware protection? That's a question I'm asking myself. As long as Windows Security doesn't actually remove a program before I have a chance to do this for a program, I can probably live with it. However, if a program actually DOES get removed,
I will disable this protection.
I've already turned UAC down to the lowest possible setting because it
was distracting me way too often.
What do YOU think about Ransomware protection?
TIA.
Frank Slootweg wrote:
John C. <r9jmg0@yahoo.com> wrote:
Windows Security's "Ransomware protection" is about as much of a PITA as >>> User Account Control.[...]
What do YOU think about Ransomware protection?
  Not much. On my Windows 11 system, 'Controlled folder access' is *off* >> and I don't think I turned it off, so I assume 'off' is the default.
  I also checked on my wife's Windows 10 system and 'Controlled folder
access' is off on that system as well. So the default *is* 'off',
because I would never lessen security on that system.
It's off in my Win10 as well; default setting.
I wonder how it actually functions to detect ransomware?
My own protection is a well-kept backup image.
Ed
Thanks for the reply, Paul.
May I pose two questions?
1. Why can't normal AV detect those lurking ransomware files?
2. Do you think my Macrium backup image and Macrium Reflect booting will be sufficient in the event of ransomware?
Ed
Frank Slootweg wrote:
John C. <r9jmg0@yahoo.com> wrote:
Windows Security's "Ransomware protection" is about as much of a PITA as >> User Account Control.[...]
What do YOU think about Ransomware protection?
Not much. On my Windows 11 system, 'Controlled folder access' is *off* and I don't think I turned it off, so I assume 'off' is the default.
I also checked on my wife's Windows 10 system and 'Controlled folder access' is off on that system as well. So the default *is* 'off',
because I would never lessen security on that system.
It's off in my Win10 as well; default setting.
I wonder how it actually functions to detect ransomware?
My own protection is a well-kept backup image.
John C. wrote:
Windows Security's "Ransomware protection" is about as much of a PITA as
User Account Control.
You were warned in the "How to boot into Windows 10 Safe Mode" thread
when you mentioned you would enable Defender's ransomware protection.
It is similar to 3rd-party firewalls with an option to block all
outgoing network connections unless you choose to block always, allow temporarily, or allow always.
In both, you get an option to throttle
what can connect by the firewall, and what can access what for
Defender's ransomware protection. You get more protection, and you
choose to do the additional control. Both come with whitelists, so some programs are exempted, but you'll keep getting nagged until you decide
on block always or allow always. Eventually the nags wane as you keep
making those decisions unless, of course, you keep installing more
software that requires more of your decisions which you opted into
getting.
On 2/25/2025 8:14 AM, John C. wrote:
Windows Security's "Ransomware protection" is about as much of a PITA as
User Account Control.
I have this protection on, but man, I really don't like the way it
blocks so many of the programs I have on my system from doing things.
To allow an "app" (God I hate that corruption of the word APPLICATION),
here's what you do (in case you don't know):
1. Open Windows Security
2. Click on "Virus & threat protection"
3. Scroll down all the way so that you can see "Ransomware protection"
4. Click on "Manage ransomware protection"
5. Under "Controlled folder access" (which at this point should be in
the "On" position), click on "Allow an app through Controlled folder
access"
6. Click on the "Add an allowed app" button
7. Take it from there to add an application to the list.
Does this PITA actually outweigh having Ransomware protection? That's a
question I'm asking myself. As long as Windows Security doesn't actually
remove a program before I have a chance to do this for a program, I can
probably live with it. However, if a program actually DOES get removed,
I will disable this protection.
I've already turned UAC down to the lowest possible setting because it
was distracting me way too often.
What do YOU think about Ransomware protection?
TIA.
   I have UAC and LUA both disabled. I don't know from
ransomware protection. Win10 never bugs
me. If anything does, I hunt it down and kill it without
mercy. But I like to work without interruption. I don't like
potholes in the road. You seem to prefer luxuriating in
indignation. Given that, it seems to me that whatever
you paid for Win10 was a bargain. If used properly, Win10
can provide endless indignation fun for the whole family. :)
John C. wrote on 2/25/2025 6:14 AM:
Windows Security's "Ransomware protection" is about as much of a PITA as
User Account Control.
I have this protection on, but man, I really don't like the way it
blocks so many of the programs I have on my system from doing things.
To allow an "app" (God I hate that corruption of the word APPLICATION),
here's what you do (in case you don't know):
1. Open Windows Security
2. Click on "Virus & threat protection"
3. Scroll down all the way so that you can see "Ransomware protection"
4. Click on "Manage ransomware protection"
5. Under "Controlled folder access" (which at this point should be in
the "On" position), click on "Allow an app through Controlled folder
access"
6. Click on the "Add an allowed app" button
7. Take it from there to add an application to the list.
Does this PITA actually outweigh having Ransomware protection? That's a
question I'm asking myself. As long as Windows Security doesn't actually
remove a program before I have a chance to do this for a program, I can
probably live with it. However, if a program actually DOES get removed,
I will disable this protection.
I've already turned UAC down to the lowest possible setting because it
was distracting me way too often.
What do YOU think about Ransomware protection?
TIA.
Just another layer of o/s hardening - Ransomware/Controlled Folder
Access (aka CFA)
 - CFA checks apps against a list of trusted apps
 - Blocks apps that are suspicious or malicious from changing files in protected folders
 - Notifies you when an app is blocked from making changes
The default in Windows 10/11 for CFA is 'Off' - i.e. disabled, requires
user intervention to enable.
Based on the information provided(or lack of), it might make senseto turn off CFA.
John C. wrote:
I'm blundering my way through all the W10 nonsense as best I can. This
morning, I finally gave up and turned off PFA just like I did UAC.
  PFA?
On 2/27/2025 9:35 AM, John C. wrote:
I'm blundering my way through all the W10 nonsense as best I can. This morning, I finally gave up and turned off PFA just like I did UAC.
PFA?
Newyana2 wrote:
John C. wrote:
I'm blundering my way through all the W10 nonsense as best I can. This
morning, I finally gave up and turned off PFA just like I did UAC.
PFA?
"Protected Folder Access". I meant CFA (Controlled Folder Access.)
I turned off Ransomware Protection completely, as seems to be the
default now with a fresh W10 or W11 install. This, in turn, disabled CFA.
Sorry about the confusion.
On 25/02/25 08:37 AM, Newyana2 wrote:
On 2/25/2025 8:14 AM, John C. wrote:
Windows Security's "Ransomware protection" is about as much of a PITA as >>> User Account Control.
I have this protection on, but man, I really don't like the way it
blocks so many of the programs I have on my system from doing things.
To allow an "app" (God I hate that corruption of the word APPLICATION),
here's what you do (in case you don't know):
1. Open Windows Security
2. Click on "Virus & threat protection"
3. Scroll down all the way so that you can see "Ransomware protection"
4. Click on "Manage ransomware protection"
5. Under "Controlled folder access" (which at this point should be in
the "On" position), click on "Allow an app through Controlled folder
access"
6. Click on the "Add an allowed app" button
7. Take it from there to add an application to the list.
Does this PITA actually outweigh having Ransomware protection? That's a
question I'm asking myself. As long as Windows Security doesn't actually >>> remove a program before I have a chance to do this for a program, I can
probably live with it. However, if a program actually DOES get removed,
I will disable this protection.
I've already turned UAC down to the lowest possible setting because it
was distracting me way too often.
What do YOU think about Ransomware protection?
TIA.
I have UAC and LUA both disabled. I don't know from
ransomware protection. Win10 never bugs
me. If anything does, I hunt it down and kill it without
mercy. But I like to work without interruption. I don't like
potholes in the road. You seem to prefer luxuriating in
indignation. Given that, it seems to me that whatever
you paid for Win10 was a bargain. If used properly, Win10
can provide endless indignation fun for the whole family. :)
I'm blundering my way through all the W10 nonsense as best I can. This morning, I finally gave up and turned off PFA just like I did UAC.
What gets me is that M$ seems to believe that those two clusterfucks are acceptable and that everybody will put up with the inconveniences that
they impose. Instead, what's actually happening is that they M$ is
killing itself as usership of W11 is actually dropping off.
VanguardLH wrote:
John C. wrote:
Windows Security's "Ransomware protection" is about as much of a PITA as >>> User Account Control.
You were warned in the "How to boot into Windows 10 Safe Mode" thread
when you mentioned you would enable Defender's ransomware protection.
Yes, and it caused me grief this morning when I attempted to get some photographs off of my camera using the freeware Cam2PC. Even though I
added the application to the "Allowed Apps" list, I still can't get my pictures off of the camera other than by doing it manually in File Explorer.
snip <
John C. wrote:
Newyana2 wrote:
John C. wrote:
I'm blundering my way through all the W10 nonsense as best I can. This >>>> morning, I finally gave up and turned off PFA just like I did UAC.
   PFA?
"Protected Folder Access". I meant CFA (Controlled Folder Access.)
I turned off Ransomware Protection completely, as seems to be the
default now with a fresh W10 or W11 install. This, in turn, disabled CFA.
Sorry about the confusion.
   I'd never heard of that. I'd never heard of ransomware
protection. I recently set up a new computer with dual boot
of Win10 and 11, but never noticed anything about RP. Odd.
But when I install a system I imediately set about cleaning it
up, so maybe that's why.
 Looking now at my 1 year old Win10 22H2, there's no mention
of RP in the lower catacombs of the ridiculous Settings app.
I guess it must be new. A page online says it should be listed
there.
 These convoluted settings, intertwined with control panel,
are even more confusing with Win11, since MS have shuffled
everything around.
 Settings -> Udates and Security -> Windows Security ->
Open Windows Security. If I had MP that would be yet
another step. Why? MS don't make a cellphone OS, yet they
seem to be trying to design Windows GUI for a cellphone. Big,
gaint, empty windows with little functionality, and lots of
slide controls. Maybe there's something they're not telling us.
I'm blundering my way through all the W10 nonsense as best I can. This morning, I finally gave up and turned off PFA just like I did UAC.
Newyana2 wrote:
John C. wrote:
Newyana2 wrote:
John C. wrote:
I'm blundering my way through all the W10 nonsense as best I can. This >>>>> morning, I finally gave up and turned off PFA just like I did UAC.
PFA?
"Protected Folder Access". I meant CFA (Controlled Folder Access.)
I turned off Ransomware Protection completely, as seems to be the
default now with a fresh W10 or W11 install. This, in turn, disabled CFA. >>>
Sorry about the confusion.
I'd never heard of that. I'd never heard of ransomware
protection. I recently set up a new computer with dual boot
of Win10 and 11, but never noticed anything about RP. Odd.
But when I install a system I imediately set about cleaning it
up, so maybe that's why.
Looking now at my 1 year old Win10 22H2, there's no mention
of RP in the lower catacombs of the ridiculous Settings app.
I guess it must be new. A page online says it should be listed
there.
These convoluted settings, intertwined with control panel,
are even more confusing with Win11, since MS have shuffled
everything around.
Settings -> Udates and Security -> Windows Security ->
Open Windows Security. If I had MP that would be yet
another step. Why? MS don't make a cellphone OS, yet they
seem to be trying to design Windows GUI for a cellphone. Big,
gaint, empty windows with little functionality, and lots of
slide controls. Maybe there's something they're not telling us.
Ransomware Protection has been in Windows Security since 2017. It was
added when Windows 10 was updated to Version 1703.
Settings
Update & Security
Windows Security
Virus & threat protection
Scroll down and click on "Manage ransomware protection
Either turn off or on the Controlled Folder Access button.
If you turn it on, then you'll see "Allow an app through Controlled
folder access", when you can do what it describes.
It's a PITA to have to deal with this until all the APPLICATIONS (GOD I
hate the term "app") I use are allowed, so I've turned the button off
for now.
Still trying to decide whether or not it's worth the effort and
frustration of adding programs to the allowed list.
Ah. I see. Boy is that buried! I have it turned off.
I have most all of that stuff turned off. Windows Defender
seems to be trying to look busy. I haven't bothered to
figure out how to stop it. Maybe there's some value there.
But in general it seems pretty much useless. It thinks I have
all kinds of malware because I left a HOSTS file copy
on the Desktop at one point.
If you're like me, an on-demand standalone AV scanner is enough.
One really good one is Emsisoft Emergency Kit. https://www.emsisoft.com/en/home/emergency-kit/
I've been using Hellzerg Optimizer to disable Windows Defender. https://github.com/hellzerg/optimizer/#--how-to-disable-defender-in-windows-10-1903-and-later
I disable Tamper Protection with a .Reg file.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Features] "TamperProtection"=dword:00000000
You can use Winaero Tweaker to verify that Tamper Protection and Windows Defender are disabled.
https://winaero.com/winaero-tweaker/
On 2/28/2025 4:39 PM, Allan Higdon wrote:
If you're like me, an on-demand standalone AV scanner is enough.
One really good one is Emsisoft Emergency Kit.
https://www.emsisoft.com/en/home/emergency-kit/
I've been using Hellzerg Optimizer to disable Windows Defender.
https://github.com/hellzerg/optimizer/#--how-to-disable-defender-in-windows-10-1903-and-later
I disable Tamper Protection with a .Reg file.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Features]
"TamperProtection"=dword:00000000
You can use Winaero Tweaker to verify that Tamper Protection and
Windows Defender are disabled.
https://winaero.com/winaero-tweaker/
 Thanks. Good notes to check out. I have occasionally
downloaded something like Clam to do a one-time check
when I feel a bt of paranoia. I don't think I've ever tried
Emsisoft.
On Fri, 28 Feb 2025 10:21:55 -0600, Newyana2 <newyana@invalid.nospam>
wrote:
   Ah. I see. Boy is that buried! I have it turned off.
I have most all of that stuff turned off. Windows Defender
seems to be trying to look busy. I haven't bothered to
figure out how to stop it. Maybe there's some value there.
But in general it seems pretty much useless. It thinks I have
 all kinds of malware because I left a HOSTS file copy
on the Desktop at one point.
If you're like me, an on-demand standalone AV scanner is enough.
One really good one is Emsisoft Emergency Kit. https://www.emsisoft.com/en/home/emergency-kit/
I've been using Hellzerg Optimizer to disable Windows Defender. https://github.com/hellzerg/optimizer/#--how-to-disable-defender-in-windows-10-1903-and-later
I disable Tamper Protection with a .Reg file.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Features] "TamperProtection"=dword:00000000
You can use Winaero Tweaker to verify that Tamper Protection and Windows Defender are disabled.
https://winaero.com/winaero-tweaker/
John C. wrote:
It's a PITA to have to deal with this until all the APPLICATIONS (GOD I
hate the term "app") I use are allowed, so I've turned the button off
for now.
On Windows, they were called "programs". Later "applications" got used
which was often shortened to "app" starting around 1992 -- 10 years
before smartphones showed up, and 24 years before Microsoft's UWP apps
showed up in Win10.
Microsoft came out with the UWP (Universal Windows Platform) programs
which they called "apps" to differentiate them from Win32 programs
(which also includes x64 programs). Often "apps" is used to cover both
Win32 programs and UWP apps mostly because most users don't know the difference between Win32 and UWP code nor do they want to. Then you
have "apps" on mobile platforms, like Android and iOS which are coded differently again.
Microsoft has a long history of using confusing and confounding product
names and terminology.
Still trying to decide whether or not it's worth the effort and
frustration of adding programs to the allowed list.
It doesn't detect malware. It is a heuristic scheme to detect unwanted behavior only against data files due to malware, or inadvertent or unauthorized actions by users. Just another hurdle to jump over whether
by malware, or by you standing there monitoring what gets to jump over
the hurdle.
John C. wrote:
PFE blocked me from installing the WordPerfect
Office X9 suite until I figured out what the problem was. How convenient
for M$ that PFE would block installation of one of their major
competitors.
PFE?
Same as PFA?
 - when both should have been/really meant to reference CFA?
VanguardLH wrote:
John C. wrote:
It's a PITA to have to deal with this until all the APPLICATIONS (GOD I
hate the term "app") I use are allowed, so I've turned the button off
for now.
On Windows, they were called "programs". Later "applications" got used which was often shortened to "app" starting around 1992 -- 10 years
before smartphones showed up, and 24 years before Microsoft's UWP apps showed up in Win10.
Huh. Didn't know it went that far back. Don't think I ever saw the term
"app" used back then, but who knows.
John C. <r9jmg0@yahoo.com> wrote:
VanguardLH wrote:
John C. wrote:
It's a PITA to have to deal with this until all the APPLICATIONS (GOD I >>>> hate the term "app") I use are allowed, so I've turned the button off
for now.
On Windows, they were called "programs". Later "applications" got used
which was often shortened to "app" starting around 1992 -- 10 years
before smartphones showed up, and 24 years before Microsoft's UWP apps
showed up in Win10.
Huh. Didn't know it went that far back. Don't think I ever saw the term
"app" used back then, but who knows.
I only remember "App" in macOS X or so. I can't remember if classic MacOS used .app file extension.
| Sysop: | Keyop |
|---|---|
| Location: | Huddersfield, West Yorkshire, UK |
| Users: | 508 |
| Nodes: | 16 (3 / 13) |
| Uptime: | 217:26:43 |
| Calls: | 9,974 |
| Calls today: | 5 |
| Files: | 13,831 |
| Messages: | 6,358,498 |