Active Protections settings question
The ATIH2018 manual is mute on the default settings:
Is there a good reason not to automatically recover files after AP blocks a process?
p.s. I see Acronis is using an experimental spelling for the word "experimental".
Ooops, sorry, you're correct Steve, I missed this mention of the settings in my pdf of the userguide.
But I do still wonder why the default is NOT to "Automatically recover files after blocking a process". Is there a good reason not to automatically recover files after AP blocks a process?
If not (I can't see why Acronis didn't by default, and) perhaps users want to enable that functionality.
Not sure on why this is not the default other than to give users the option as to whether to recover such files or not, in case recovering the files would lose changes which were made by the user for a program which has generated a false positive with AAP?
That makes sense, thank you very much Steve. I've enabled that setting.
Can someone explain what is meant by "temporary copies of your backups" as a place from which to recover files?
In my case I would not check the Automatically recover option because I'm not using the cloud and the NAS is not generally online, so it would be difficult to find a good copy. Also, depending on how often backups are made, it could be that a recovered file could be older than desired.
I'm still trying to figure out AP.
Bruno, the actual wording is:
If this check box is selected, Acronis True Image 2018 recovers the files from their temporary copies or your backups, after blocking a process.
If there are relevant backup .tib files available on a local, external or network drive then Acronis would be able to recover data from such files, otherwise, I would assume that this implies that Acronis is taking some type of proactive measures when it detects that files are being modified by potential ransomware and is capturing temporary copies of the files involved.
We would need an answer from Acronis development to get a precise explanation which I suspect they may not want to publish in an open forum in case the information offers malware authors information they could use to try to bypass this protection mechanism.