WinRansomProtect
Offline anti-ransomware for Windows. Stops ransomware before it encrypts your files.
About
WinRansomProtect is an offline anti-ransomware tool for Windows 10 and 11. It watches your files and stops ransomware before it can encrypt them. 32 rules, combining signature detection with behavior analysis.
It reacts fast. Commands like vssadmin delete shadows get caught within 200ms. Suspicious files go to quarantine first, so you can restore them if it's a false alarm. Also keeps an eye on Documents, Desktop, and Downloads.
Runs quietly in the background, under 5% CPU. No cloud, no telemetry, no account.
A 14-day fully functional free trial is included. After that, an in-app purchase (license key) is required to keep using it.
Fact Sheet
Discussion
Catching shadow copy deletion within 200ms targets one of the clearest early signs of ransomware. Quarantining suspicious files first, so a false alarm can be restored, is a sensible balance between speed and safety.