Cybereason RansomFree

When you install Cybereason RansomFree, it displays this welcome screen and immediately goes to work in the background. You may never see it again, unless it fends off a ransomware attack.

RansomFree places folders of bait files in the Desktop, Documents, and other sensitive folders. It closely monitors these bait files, and whacks any ransomware that takes the bait.

On detecting a process acting like ransomware, RansomFree suspends the process and displays this warning. Unless you're absolutely sure the process is legitimate, perhaps an encryption tool that you launched yourself, click Yes to terminate the threat.

The ransomware activity warning includes a link to view files created, modified, or deleted by the suspect process. This particular sample deletes itself from disk after loading into memory, and the file list reflects that fact. It didn't manage to do anything else!

On finishing ransomware cleanup, RansomFree warns that you may need to delete ransom notes or reverse other non-malicious changes made by the ransomware.

Clicking the system tray icon just displays this informative page. There are no logs, settings, or other features that you need to worry about.