What does EaseUS ToDo backup protection do and how re: Ransomeware

EaseUS Todo Home has an option to protect Win10/11 backups from Ransomware called "Backup Protection." Neither their manual nor their website details what this does and/or how it works. Is it only for an air-gapped cloud backup or can it be local internal and/or external? Does it use a volume mount/unmount, approved app list or an API or what? Is it similar to Acronis True Image's?

TambourineMan said:

EaseUS Todo Home has an option to protect Win10/11 backups from Ransomware called "Backup Protection." Neither their manual nor their website details what this does and/or how it works. Is it only for an air-gapped cloud backup or can it be local internal and/or external? Does it use a volume mount/unmount, approved app list or an API or what? Is it similar to Acronis True Image's?

Click to expand...

@OAT - Thanks for your reply.

The info at the links is for EaseUS's "Security zone." I was inquiring about the other option in the "Tools" drop down menu: "BackUp Protection."

There is a link ( EaseUS Todo Backup ) when this is selected but it just describes how to set it up. I would like to know what is setup and how it works so I may gauge how effective it might be against ransomware.

I turned mine on... i do hate encryption for my home computer.. but am trying this feature

Having just read your LINK above, it appears they are providing ACCESS Protection (unauthorized modifications)... this should be more than adequate to prevent general RansomeWare.

Froggie said:

Having just read your LINK above, it appears they are providing ACCESS Protection (unauthorized modifications)... this should be more than adequate to prevent general RansomeWare.

Click to expand...

Yeah - I am pretty sure this is similar to Macrium Reflect Home's "Macrium Image Guardian" which basically protects images from being tampered with. Images cannot be deleted or modified unless physically running Macrium Reflect Home. They key point is that even if all other files get infected with malware/ransomware, you can still recover from it with your unaffected images.

I do not understand how ransomware encrypts files, or does so so quickly, but seemingly it can easily change file attributes (read only, hidden, etc.) and/or just double encrypt an encrypted file (so encryption does not protect against ransomware).

A long time ago I did not understand how what Macrium Image Guardian did and was initially frustrated I could not move, copy make a backup of an image file (belts and suspenders / one is none and two is one) until that was disabled.

Seemingly the only way to protect a backup file is to locate it in an inaccessible place with manual air gapped being the only really safe one (although if someone doesn't know they've been attacked once connected it will just become encrypted also. Possibly a place that requires a password (that is not stored on the computer) to access it (including making anew backup) might work, but who knows?