User's Manual

122 Copyright © Acronis International GmbH, 2003-2020
9.1 Active protection
To protect your computer from malicious software in real-time, Acronis True Image 2021 uses the
Acronis Active Protection technology.
Active Protection constantly checks your computer for ransomware, cryptomining processes, viruses
and other malicious threats, and provides Web filtering while you continue working as usual. In
addition to your files, Acronis Active Protection protects the Acronis True Image application files,
your backups, archives, and the Master Boot Records of your hard drives.
Active protection consists of several protection levels that you can enable independently from each
other:
 Anti-ransomware protection
 Real-time protection
 Web filtering
Antiransomware protection
Ransomware encrypts files and demands a ransom for the encryption key. Cryptomining malware
performs mathematical calculations in the background, thus stealing the processing power and
network traffic of your machine.
When the Antiransomware Protection service is on, it monitors in real time the processes running
on your computer. When it detects a third-party process that tries to encrypt your files or mine
cryptocurrency, the service informs you about it and asks if you want to allow the process to
continue or to block the process.
To allow the process to continue the activity, click Trust. If you are not sure if the process is safe and
legal, we recommend that you click Quarantine. After this, the process will be added to Quarantine
and blocked from any activities.
After blocking a process, we recommend that you check if your files have been encrypted or
corrupted in any way. If they are, click Recover modified files. Acronis True Image 2021 will search
the following locations for the latest file versions to recover.
 Temporary file copies that were preliminarily created during the process verification
 Local backups
 Cloud backups
If Acronis True Image 2021 finds a good temporary copy, the file is restored from that copy. If
temporary file copies are not suitable for restore, Acronis True Image 2021 searches for backup
copies locally and in the cloud, compares the creation dates of the copies found in both locations,
and restores your file from the latest available non-corrupt copy.
Note Acronis True Image 2021 does not support file recovery from password-protected backups.
To configure Acronis True Image 2021 to automatically recover files after blocking a process, select
the Automatically recover files after blocking a process check box in the Active Protection settings.
See Configuring Active Protection (p. 124).
Real-time Protection
When Real-time Protection is enabled, it constantly checks the files you interact with to protect your
machine from suspicious activity, viruses, and other malicious threats in real time.