What is Ransomware?

Ransomware is a type of malicious software that can encrypt important files on your PC, making them inaccessible until a sum of money (a ransom) is paid. Even after paying the ransom, there is no guarantee that you can recover your files.

What is Ransomware Shield?

Ransomware Shield secures your personal photos, documents, and other files from being modified, deleted, or encrypted by ransomware attacks. This feature enables you to protect your files and folders from untrusted applications and specify which applications have permission to access your protected folders.

How do I access Ransomware Shield?

To access this feature, ensure you have the latest version of Avast Antivirus, then go to Protection ▸ Ransomware Shield.

Can Ransomware Shield decrypt files encrypted by ransomware?

No. Ransomware Shield can prevent the infection by protecting your files and folders, but it is not a decryption tool. For a list of free ransomware decryption tools you can download, refer to the following Avast webpage:

• Free Ransomware Decryption Tools

How do I manage Ransomware Shield activity?

To specify how Ransomware Shield handles attempts to access files in your protected folders:

1. Open Avast Antivirus, then go to Protection ▸ Ransomware Shield.
2. Click Settings (the gear icon) in the top-right corner.
3. Select an option under Select your preferred mode:
   • Smart Mode (default and recommended setting): Ransomware Shield refers to a list of commonly used and trusted applications to determine which programs can modify files in your protected folders. If any applications that are not in this list attempt to modify files in your protected folders, you are notified and asked for permission.
   • Strict Mode: If any applications attempt to modify files in your protected folders, you are notified and asked for permission every time (excluding those you have already added to the Blocked & Allowed apps lists). Selecting this option may result in frequent and potentially obtrusive alerts.

To learn more about how to use Ransomware Shield, refer to the following article:

• Ransomware Shield - Getting Started

Which files and folders does Ransomware Shield secure?

Ransomware Shield automatically secures folders where you might store personal data (such as your Documents folder). All subfolders will also be automatically protected. To manually add another folder to the list of protected folders:

1. Open Avast Antivirus, then go to Protection ▸ Ransomware Shield.
2. Click Protect new folder, then select a folder and click OK.

To remove a folder, hover your cursor over the relevant folder's panel, click the X icon that appears, then click Stop protecting.

To specify which types of files are protected in each folder, click Settings (the gear icon) in the top-right corner, then under File types, tick or untick the box next to each file type according to your preferences.

How do I allow or block specific applications from modifying files in my protected folders?

To specify which applications Ransomware Shield allows or blocks:

1. Open Avast Antivirus, then go to Protection ▸ Ransomware Shield.
2. Click Settings (the gear icon) in the top-right corner.
3. Click View allowed / blocked apps.
4. Click + Block app or + Allow app to add an application to the relevant list.

To remove an application from either list, click … More options (three dots) next to the relevant row, and select Remove.

For more information about the Blocked & Allowed apps screen in Avast Antivirus, refer to the following article:

• Using the Blocked & Allowed apps settings screen in Avast Antivirus