Keep your Volume Shadow Copy in Windows 10 safe [ransomware]

Most modern ransomware removes shadow copies though.

You can now use Raccine to terminate all processes that try to delete Shadow volumes using exactly Microsoft‘s vssadmin.exe program.

The good news is that it always acts before ransomware stands a chance to start encrypting data on your PC.

What is Volume Shadow Copy Windows 10?

Volume Shadow Copy Service or VSS is a special Microsoft Windows technology used to create backup copies or snapshots of volumes or computer files.

This can happen even when they are in use. Just remember that for volumes under 500 megabytes, the free space required if of minimum 50 megabytes.

For volumes over 500 megabytes, the number changes to a minimum of 320 megabytes this time.

How can I install and use Raccine?

1. Firstly, download Raccine.exe into your PC.


2. Then, use an elevated command prompt to copy it to the C:Windows folder.


3. Up next, also download the raccine-reg-patch.reg Registry file.


4. Don’t hesitate to double-click on it.


5. When it prompts you to merge the contents into the Registry, don’t hesitate to give it your permission to do so.

Raccine basically works by registering the raccine.exe executable as a debugger for vssadmin.exe by using the Image File Execution Options Windows registry key.

Once you register raccine.exe as a debugger, every time vssadmin.exe is executed, it will also launch Raccine, which will check to see if vssadmin is trying to delete shadow copies.

If it happens to discover that a process is indeed using vssadmin delete, it will automatically terminate the process.

Thank you for viewing the article, if you find it interesting, you can support us by buying at the link:: https://officerambo.com/shop/