hmLoadTopic({
hmKeywords:"",
hmTitle:"Ransomware Shield",
hmDescription:"ESET business applications include Ransomware Shield. This new security feature is a part of HIPS and protects computers from ransomware. When ransomware is detected on a...",
hmPrevLink:"products_compatible_with_detection_exclusions.html",
hmNextLink:"eset_inspect.html",
hmParentLink:"threats.html",
hmBreadCrumbs:"<a href=\"using.html\">Using ESET PROTECT On-Prem<\/a> &gt; <a href=\"working_with_era.html\">ESET PROTECT On-Prem Main Menu<\/a> &gt; <a href=\"threats.html\">Detections<\/a>",
hmTitlePath:"Using ESET PROTECT On-Prem > ESET PROTECT On-Prem Main Menu > Detections > Ransomware Shield",
hmHeader:"<h1 class=\"p_Heading1\"><span class=\"f_Heading1\">Ransomware Shield<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_Normal\">ESET business applications include <span class=\"f_UI\">Ransomware Shield<\/span>. This new security feature is a part of HIPS and protects computers from ransomware. When ransomware is detected on a client computer, you can view the detection details in the ESET PROTECT Web Console under <span class=\"f_UI\">Detections<\/span>. To filter only ransomware detections, click <span class=\"f_UI\">Add Filter<\/span> &gt; <span class=\"f_UI\">Scanner<\/span> &gt; <span class=\"f_UI\">Anti-Ransomware scanner<\/span>. For more information about Ransomware Shield, see the <a href=\"https:\/\/help.eset.com\/glossary\/en-US\/technology_ransomware_protection.html\" target=\"_blank\" onclick=\"return HMTrackTopiclink(this);\" class=\"weblink\">ESET Glossary<\/a>.<\/p>\n\r<p class=\"p_Normal\">You can remotely configure <span class=\"f_UI\">Ransomware Shield<\/span> from the ESET PROTECT Web Console using the <span class=\"f_UI\">Policy<\/span> settings for your ESET business application:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Enable Ransomware Shield<\/span><span class=\"f_NormalList\">—The ESET business application automatically blocks all the suspicious applications that behave like ransomware.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Enable Audit Mode<\/span>—When you enable the Audit Mode, detections identified by the Ransomware Shield are reported in the ESET PROTECT Web Console, but the ESET security application does not block them. The administrator can decide to block the reported detection or exclude it by selecting <span class=\"f_UI\"><a href=\"create_exclusion.html\" class=\"topiclink\">Create Exclusion<\/a><\/span>. This Policy setting is available only via ESET PROTECT Web Console.<\/p>\n\r<p class=\"p_Normal\">The ESET security application can <a href=\"computer_details.html#detections_and_quarantine\" class=\"topiclink\">restore the files attacked by ransomware<\/a>.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Important\" title=\"Important\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\">By default, Ransomware Shield blocks all applications with potential ransomware behavior, including legitimate applications. We recommend that you <span class=\"f_UI\">Enable Audit Mode<\/span> for a short period on a new managed computer, so that you can exclude legitimate applications that are detected as ransomware based on their behavior (false positives). We do not recommend that you use the Audit Mode permanently, because ransomware on the managed computers is not automatically blocked when Audit Mode is enabled.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r"
})
