“Ransomware often blows away shadow copies/i.e. system restore points.”
==
Ya get ransomware on your device/PC, fuhgeddaboudit You might be able to find a fix if you’re lucky. But most often, a guy’s up a creek without a paddle. A destroyed restore point won’t matter much when you have to re-format and reinstall Windows or whatever OS you’re using. Unless a guy wants to pony up the 300+ bucks for the unlocking key - and even then, if it’s an unethical crook (heh) they could just take your bitcoin bucks and leave you still scruuwed over.
Along with my other measures I use an anti-ransomeware prog in Windows. LIke I said, Win is high maintentance, security-wise.
The best thing to do is to clone the drive on to another seperate, unconnected drive every now and then so a fella doesn’t have to a reinstall from scratch due to a severe crash or some nasty malware.
In addition to a restore point, I use RegBak and Erunt - both free programs that do a more thorough save-restore than the Win’s restore point.
http://listoffreeware.com/list-of-best-free-registry-backup-software
A program called WinRescue used to a must have, but it doesn’t support Win7 64bit or Win8/Win10. A life-saver in it’s day, tho,
i do image back ups to .iso files using parted magic (offshoot of clonezilla)
i also use synology NAS with cloudstation and back that up to idrive
i use webroot for a/v
you are correct to surmise that once hit by ransomware, you are toast