Didn't see one of the easiest full/incremental Windows BU packages there (maybe because it's a file-by-file, not an image backup, but it saved my backside a couple of times (just booted from a cloned drive and cloned it back onto affected partition in a space of a few minutes) - XXCLONE from Pixelab
They have a free (slightly crippled, but very functional) non-commercial and a low-cost full versions of software.
Also, "an ounce of prevention..." :
CryptoPrevent from FoolishTech - free utility in only 350K file that protects against Cryptolocker AND some other malware as well:
Incidentally, due to the way that CryptoPrevent works, it actually protects against a wide variety of malware, not just Cryptolocker! CryptoPrevent is a tiny utility to lock down any Windows OS to prevent infection by the Cryptolocker malware or 'ransomware', which encrypts personal files and then offers decryption for a paid ransom. CryptoPrevent artificially implants group policy objects into the registry in order to block certain executables in certain locations from running. Note that because the group policy objects are artificially created, they will not display in the Group Policy Editor on a Professional version of Windows — but rest assured they are still there!
A 2T+ USB-powered drive(s) for backups and data portability is a no-brainer investment of about $100 per drive and a peace-of-mind lifesaver.
CryptoPrevent just creates local security policy on a Windows machine to prevent executables from running in the %appdata% portion of your hard drive; however, unless you’re running Windows 7 Professional or Ultimate, it won’t work. Windows 7 Home and Home Premium do not have the capability of setting this local security policy since that portion of the registry hive is missing.
For a general rule is that we should keep an eye on what is running, and a primary free prog. for that is the well known Win Patrol , which is will alert you to changes made in start up apps, and home pages, etc. as well as many other things. Look for it in your system tray (by the clock).
Also, System Tray Meter , a very basic meter with a small footprint, which can show you cpu and memory load in your system tray. Download here.
Once downloaded, unzip it (r. clk and extract all) and then place it in your startup folder. To find that, look in your Start menu for the Startup folder, and right clk and hit Properties and copy (ctrl+c) the location).
Then, after you launch it, then right clk on the Taskbar, hit Properties, and then Customize, and choose to Show icon and notifications. Then you can always see it on your system tray,
Of course, if you have W/8, then use the free Classic Shell to gain easier access.
Also one should have Process Explorer which gives details on what is running, cpu and ram usage, and easy ability to restart, kill, resume programs. Familarize thyself with what normally runs.
While you are at technet.microsoft.com, get Autoruns , which provides a comprehensive list of everything that is set to start with Windows.
Depending on your cpu and program load, the cpu cycles should not be above 12% consistently.
Also worth mentioning is System Explorer (download ) as it gives Internet activity.
It does take time for CryptoLocker to do its encryption. Further reading on CryptoLocker:
BleepingComputer discussion thread.
Malwarebytes: Cryptolocker Ransomware: What you need to know.
Naked Security (Sophos): Destructive malware Cryptolocker on the loose.
http://www.symantec.com/connect/forums/cryptolocker-and-adc-policies
Reddit thread: Proper care and feeding of your Cryptolocker
Makeuseof.com: Cryptolocker is the nastiest malware ever and here’s what you can do
Ars Technica: You’re infected — if you want to see your data again, pay us $300 in Bitcoins
Or you can use get a USB 2.0 to IDE SATA 2.5 3.5 Hard Drive Converter Cable for about $3.35 for old drives. Open the case and plug in the drive and then plug in the USB once the OS is loaded. On IDE HDs make sure the pins are set to Master. . For a little more you can find ones with a power adapter