CryptoDrop Anti-Ransomware

Like many ransomware protection tools, CryptoDrop Anti-Ransomware has a very simple main window. Colored indicators reflect the product's detection and recovery status, and a handful of buttons invoke the program's features.

CryptoDrop offers a free edition, but it only protects the Documents folder, and does not include the ability to recover files that the ransomware encrypted before detection.

By default, CryptoDrop protects the Documents, Music, Pictures, and Videos folders for each Windows user account. You should add the Desktop folder for each account, and any other folders you use to store important files.

DropSafe is a special folder that CryptoDrop uses to securely back up your files. Other programs can't see the contents of this folder, so the backups are safe from ransomware.

When CryptoDrop detects tampering that suggests ransomware, it suspends the offending process and offers to go into read-only Lockdown mode.

Lockdown mode prevents all changes to your files. This lets you run the file recovery process without any worry of interference. Be sure to exit Lockdown mode once you've dealt with recovery.

The wide, short file recovery window lists all files that may have been damaged by the ransomware, along with the full name of the secured backup.

In some cases, the recovery process resulted in as many as four copies of each file.

CryptoDrop suspends ransomware processes on detection, but it didn't manage to stop this one, which went on to display a ransom note during the recovery process. On a positive note, it did not encrypt any more files.