How to Protect Your Computer from Ransomware

Ransomware encrypts every file on your computer and demands payment — usually $500–$5,000 or more — in exchange for the decryption key. Edmonton businesses and individuals are not immune. The good news: most ransomware infections are preventable.

Step 1: Keep backups — disconnected from your computer

Ransomware encrypts everything it can reach, including connected drives. If your backup is always plugged in, it gets encrypted too. The safest strategy:

• Use a cloud backup service (Backblaze, iDrive, or Microsoft 365 with version history) — ransomware can't delete properly configured cloud copies
• Keep an external drive you connect only during backup sessions, then disconnect
• Test your backups periodically by actually restoring a file

Step 2: Don't click suspicious attachments or links

The vast majority of ransomware infections start with a phishing email — a message with either a malicious attachment or a link to a fake download.

• Be suspicious of unexpected emails with attachments, even from known contacts
• Never open .zip, .exe, .docm, .xlsm files from unsolicited emails
• When in doubt, call the sender to verify before opening anything

Step 3: Keep Windows and all software updated

Ransomware frequently exploits known vulnerabilities. The WannaCry outbreak in 2017 infected hundreds of thousands of computers running versions with available patches that hadn't been applied. Enable automatic updates in Windows Settings → Windows Update, and keep all your applications current.

Step 4: Use a reputable antivirus with ransomware protection

Windows Defender (built into Windows 10 and 11) provides reasonable protection. For stronger coverage, consider Malwarebytes, Bitdefender, or ESET — these include specific ransomware behaviour blocking that can catch new threats before they spread.

Step 5: Use strong passwords and two-factor authentication

Ransomware also enters networks through compromised Remote Desktop access — attackers brute-force their way in with stolen or guessed passwords. Use strong, unique passwords and enable two-factor authentication wherever possible. See our article on two-factor authentication for a step-by-step guide.

Step 6: Be cautious with Remote Desktop

If you use Windows Remote Desktop (RDP), ensure it's not exposed directly to the internet. Use a VPN to access your network first, then connect via RDP. If you're unsure how your remote access is configured, an IT professional can audit it quickly.

If ransomware hits despite your precautions

• Disconnect from the internet and network immediately to stop the spread
• Do not pay the ransom
• Report it to the Canadian Centre for Cyber Security at cyber.gc.ca
• Check nomoreransom.org for free decryption tools before paying anything
• Contact a professional to assess recovery options