Aller au contenu principal

Protection against ransomeware - Question about mount / dismount of target drive

Thread needs solution

I've read that when a ransomeware malware is installed, it can encrypt and lock all local volumes on the computer it infects.  For this reason, I am wondering if it would be a best practice to mount and unmount target destination for my True Image backups.  That is to say, the target volume would only be mounted while the backup is in progress, then unmounted when the backup completes. 

Is there a way to automatically mount/dismount the target drives as part of my True Image backup tasks?

Thanks for any advice.

Kind regards,
Steve

0 Users found this helpful

Steve, welcome to these user forums.

There is no automatic way provided with Acronis True Image to allow you to mount / unmount your target backup drives - you would need to either do this yourself manually, or create a script to use with the Pre/Post Commands option for your backup task.  However, if you can do this via a script using system commands, then it is possible that malware could use the same approach to find and mount your backup drive(s) too!

See webpages: How to mount and unmount hard drives under Windows (the unix way)  and  Mount and dismount hard drive through a script/software [duplicate] for information on what you would need to do in terms of script commands.

The best protection against ransomware is to have multiple different backups stored in different locations, in particular, having offline backups that remain disconnected from any computer and thus isolated from any network threats.  In addition you should keep your computer fully upto date with all available Windows Updates, Antivirus definitions etc and use Sandbox type software when using the web to visit any potential insecure web sites.

There have been a number of discussions on this subject in the forums, see post https://forum.acronis.com/forum/124738#comment-385595 for links to some of these.