Blog Post

Microsoft OneDrive Blog
2 MIN READ

OneDrive Files Restore and Windows Defender takes ransomware protection one step further

Aaron Rimmer's avatar
Aaron Rimmer
Icon for Microsoft rankMicrosoft
Apr 30, 2018

At the beginning of April, OneDrive announced new protection capabilities that offer Office 365 Home and Office 365 Personal subscribers additional peace of mind including the ability to recover files from malicious attacks like ransomware and new tools to help keep your information secure and private. This included bringing the powerful OneDrive for Business feature, Files Restore, to your personal OneDrive account.

 

Today, we are taking this protection one step further with the integration of OneDrive Files Restore and Windows Defender Antivirus. This will further protect you from ransomware attacks by identifying the breach and guiding you through remediation and file recovery, so you don’t have to submit to cybercriminal demands if your files are in OneDrive.

 

Saving your files to OneDrive gives you an additional layer of protection from ransomware. If a ransomware threat is found on your device, Windows Defender will notify you of the threat, help you remove the ransomware from your device, and give you the option to use OneDrive Files Restore so you can recover your OneDrive files to the state they were in before the attack occurred. The date and time that Windows Defender detected the attack will be pre-selected in Files Restore, making the process simple and easy to use.

 

Files Restore and Windows Defender integration is available for Office 365 Home, Office 365 Personal, and OneDrive for Business users. This integration is beginning to rollout to Windows Insiders today and will be available to all Windows 10 April 2018 Update users in the coming weeks. Learn more about the protections available to Office 365 Home and Personal subscribers.

 

 After removing the ransomware from your device, you can start the OneDrive Files Restore process by clicking the notification

 

Files Restore opens with the date and time of the attack pre-selected, so you can restore your files to before they were compromised

Updated Apr 30, 2018
Version 1.0
  • Hi Ahmad OsmanThis integration doesn't require Windows Advanced Threat Protection, but Files Restore does require having Office 365 Home, Office 365 Personal, or OneDrive for Business.  

  • Deleted, this integration only works with Windows Defender Antivirus. Ed Hansberry, we have nothing to share on Files Restore support for SharePoint document libraries at this time.

  • Ed Hansberry's avatar
    Ed Hansberry
    Bronze Contributor

    When is this coming to Office 365 Sharepoint libraries that people are syncing via the ODfB client?

  • Does this work even if I am using a different antivirus, like Avast or Panda?