What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Ransomware is malware that can lock people and organizations out of files by encrypting them, then demand payment to restore access. An attack may also steal data and threaten to publish it, so recovering files does not necessarily end the incident. Reducing risk takes layers: limit ways in, restrict what intruders can reach, keep recoverable backups, and prepare a response. The detailed controls below are primarily organizational guidance; no universal household cleanup sequence is established by the cited official sources.
What ransomware does
CISA and partner agencies define ransomware as malware designed to encrypt files, making them and systems that depend on them unusable, while attackers demand payment for decryption. Encryption can disrupt access to individual files as well as services that rely on them.
Some attackers also copy data and threaten to disclose it. CISA calls pressure based on both encryption and data theft “double extortion.” In some incidents, attackers steal and threaten to expose data without encrypting files. That distinction matters: restoring from backup may restore access to files, but it does not undo a data breach or resolve disclosure threats.
How ransomware gets in and spreads
Phishing is one route, not the only route. CISA’s guide identifies several common initial-access paths for organizations:
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitches#1 Best Overall
- USB A PORT BLOCKERS WITH KEY: Designed for standard USB A ports on laptops, desktop PCs, notebooks, and docking stations. Includes 10 USB blockers and a removal key for simple physical port control on compatible devices.
- PREVENT DATA THEFT AND UNWANTED ACCESS: Use these USB port locks to restrict unauthorized data transfer on unattended devices. They provide total peace of mind for offices, schools, front desks, computer labs, and libraries.
- FOR WORK, TRAVEL, AND SHARED DEVICES: Useful when devices are left unattended or used by multiple people. Ideal for business travel, classrooms, hotel workstations, field setups, and family computers in shared spaces.
- DUST AND MOISTURE PROTECTION: In addition to controlling port access, these USB A blockers keep out dust, debris, and moisture that collect in open ports over time. A smart choice for everyday protection and cleaner ports.
- DESIGNED FOR IT ADMINS AND HOME USERS: Made from durable, heat resistant PE material. A simple solution for IT teams, schools, parents, and security minded users who want better control over open USB A ports.
- Exposed or vulnerable systems: Internet-facing services with unpatched vulnerabilities or insecure configurations can provide an entry point.
- Compromised credentials: Stolen or otherwise compromised login details may let an attacker access email, remote access, or other systems.
- Phishing and precursor malware: A suspicious message or other malware may help an attacker gain an initial foothold.
- Third parties: A vendor, managed service provider (MSP), or other external party with access can create risk if that access is compromised or too broad.
- Poorly secured remote access: Services such as Remote Desktop Protocol (RDP) are risky when exposed or inadequately protected.
After getting in, attackers may move through the network, compromise more accounts or devices, and reach data and services beyond the first system. They may also seek out backups that connected systems can access. Not every incident follows the same sequence, and an apparent ransomware infection can be only one part of a wider intrusion.
Which protections reduce organizational risk
CISA’s recommendations are layered controls for organizations with managed systems, IT responsibilities, or security processes—not a promise that any one product or setting prevents ransomware.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Reduce exposed entry points
- Patch and scan internet-facing systems, prioritizing exposed assets and known vulnerabilities.
- Close unused ports and avoid exposing remote desktop services directly to the internet where possible.
- For necessary remote access, apply controls such as multifactor authentication (MFA) and account lockouts where applicable, and log access so it can be reviewed.
Limit account and vendor access
- Use phishing-resistant MFA, especially for email, VPNs, and critical systems.
- Give users and services only the permissions required for their roles. Separate administrative accounts and duties from routine work.
- Limit third-party and MSP access to the systems and permissions needed for their work; define backup and security responsibilities clearly.
Make phishing and malware harder to act on
- Train staff to recognize and report suspicious messages, and make external email identifiable.
- Filter suspicious messages and attachments, and keep centrally managed anti-malware current.
- For organizational devices, consider application allowlisting and/or endpoint detection and response (EDR), as CISA recommends.
How to make backups useful in a ransomware incident
A backup only helps if it remains available and can be restored. CISA recommends keeping critical backups encrypted and offline, then regularly testing their availability and integrity as part of recovery. Ransomware may search for backups that connected systems can reach and delete or encrypt them.
An encrypted external hard drive or SSD can be one way to keep a separate copy, but disconnect it or otherwise isolate it when it is not in use. Buying a drive by itself does not prevent infection or guarantee recovery; test restoring data from the backup. Organizations evaluating backup approaches should consider how isolated the copies are from production accounts and devices, how reliably they can be restored, expected recovery time, and data or compliance requirements. CISA notes that immutable storage can involve configuration, compliance, and cost considerations.
Rank #3
- Protect Confidential Data, Prevent Unauthorized Access: Protect sensitive data and prevent unauthorized access to your computer. Our robust metal USB port lock physically locks all unused USB ports, ensuring your files, photos, and confidential information are protected from data theft and external intrusion
- Dust and Moisture Protection,Extending Device Lifespan: Protect your devices from dust, dirt, and moisture, extending their lifespan. By sealing unused ports, you reduce the risk of port damage and malfunction, avoid costly repairs, and maintain the long-term performance of your laptops and desktops
- Quick Tool-Free Installation:Easy installation in seconds. No tools or technical experience required—simply insert the port lock and lock it in place. Its compact and portable design makes it ideal for travel, the office, and public places
- Convenient Master Key and Durable Metal Design:Simplify security management by controlling all compatible locks with a single master key. This lock is made of durable, high-strength metal for long-lasting durability
- Widely Applicable to Homes and Offices:Ideal for home and workplace security. This prevents children from using unauthorized USB drives and accidentally damaging ports, and restricts unauthorized device connections in the office, thereby improving safety and productivity
Prepare before an incident
Organizations should identify critical systems and dependencies, decide which services to restore first, and maintain and exercise an incident-response and communications plan. The NIST ransomware profile announcement describes ransomware risk management across governance, identification, protection, detection, response, and recovery. NIST’s IR 8374 Revision 1 publication record lists the final profile as published June 11, 2026.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What organizations should do during a suspected attack
For an organization, follow its approved incident-response plan and use its designated response team or trusted incident responders. CISA’s checklist prioritizes determining which systems are affected and containing the incident:
Rank #4
- USB A PORT BLOCKERS WITH KEY: Designed for standard USB A ports on laptops, desktop PCs, notebooks, and docking stations. Includes 50 USB blockers and a removal key for simple physical port control on compatible devices.
- PREVENT DATA THEFT AND UNWANTED ACCESS: Use these USB port locks to restrict unauthorized data transfer on unattended devices. They provide total peace of mind for offices, schools, front desks, computer labs, and libraries.
- FOR WORK, TRAVEL, AND SHARED DEVICES: Useful when devices are left unattended or used by multiple people. Ideal for business travel, classrooms, hotel workstations, field setups, and family computers in shared spaces.
- DUST AND MOISTURE PROTECTION: In addition to controlling port access, these USB A blockers keep out dust, debris, and moisture that collect in open ports over time. A smart choice for everyday protection and cleaner ports.
- DESIGNED FOR IT ADMINS AND HOME USERS: Made from durable, heat resistant PE material. A simple solution for IT teams, schools, parents, and security minded users who want better control over open USB A ports.
- Assess and contain: Identify affected systems and isolate them from networks. If several systems or subnets are affected, taking the network offline at the switch level may be appropriate. If needed, disconnect individual affected devices from wired or wireless networks.
- Preserve evidence where feasible: CISA treats powering down as a fallback if network disconnection is not possible, because shutting down can destroy volatile evidence. Coordinate containment decisions and consider using communications channels outside potentially affected systems.
- Investigate the intrusion: Triage critical services, review logs and endpoint defenses for signs of earlier compromise, and identify accounts or systems that enabled access.
- Recover cautiously: Restore clean systems from offline, encrypted backups in priority order, taking care not to reintroduce the infection. If data was breached, follow the organization’s notification and communications plan.
For a personal device, the official sources cited here do not establish one cleanup sequence that is safe for every case. Seek trusted technical support and consult current official guidance rather than assuming that a particular consumer cleanup step will fit the situation. The CISA StopRansomware information page describes the guide as an interagency resource from CISA, FBI, NSA, and MS-ISAC.
Quick Recap
Best Value
- Protect Confidential Data, Prevent Unauthorized Access: Protect sensitive data and prevent unauthorized access to your computer. Our robust metal USB port lock physically locks all unused USB ports, ensuring your files, photos, and confidential information are protected from data theft and external intrusion
- Dust and Moisture Protection,Extending Device Lifespan: Protect your devices from dust, dirt, and moisture, extending their lifespan. By sealing unused ports, you reduce the risk of port damage and malfunction, avoid costly repairs, and maintain the long-term performance of your laptops and desktops
- Quick Tool-Free Installation:Easy installation in seconds. No tools or technical experience required—simply insert the port lock and lock it in place. Its compact and portable design makes it ideal for travel, the office, and public places
- Convenient Master Key and Durable Metal Design:Simplify security management by controlling all compatible locks with a single master key. This lock is made of durable, high-strength metal for long-lasting durability
- Widely Applicable to Homes and Offices:Ideal for home and workplace security. This prevents children from using unauthorized USB drives and accidentally damaging ports, and restricts unauthorized device connections in the office, thereby improving safety and productivity
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →
