OneDrive vs. Ransomware (Updated)

Posted on February 1, 2017 by Paul Thurrott in OneDrive, Windows, Windows 10 with 43 Comments

OneDrive vs. Ransomware

Microsoft has responded to a reader query about OneDrive and its resiliency against ransomware.

Premium members may recall that Sprtfan asked last week—as part of our weekly “We Help Wednesday” episode of First Ring Daily—whether OneDrive offered any particular defense against ransomware:

Strategies to protect your self from ransomware? I automatically back up everything to OneDrive but recently found out that ransom ware could potentially encrypt my OneDrive folder also. Does the personal version of OneDrive have anyway to recover from this if it happens?

Brad and I were unsure how OneDrive might be able to help with this issue, so I asked Microsoft for an official response. Last night, that response arrived.

“Yes, OneDrive has the capability to restore files affected by ransomware by using Version History or restoring from the Recycle Bin,” a Microsoft spokesperson told me via email.

Microsoft also provided the following related links:

Ransomware FAQs. On its Ransomware site at the Malware Protection Center, under the section “How do I get my files back?”, Microsoft explains how you can recover OneDrive-based files using Version History.

Delete or restore files and folders in OneDrive. This page on the Office Support website explains how you can restore deleted items using the OneDrive Recycle Bin.

Hopefully this helps.

UPDATE: Some have noted that Version History only works for Office files I will ask Microsoft again.

UPDATE 2: Microsoft has responded with:

While Version History only works with Office files, OneDrive has the ability to restore both Office and non-Office files through the Recycle Bin if ransomware deleted the original file and re-uploaded it (often with a different name or file extension).

You can find more information here on how to restore your files.

Elevate the Conversation!

Join Thurrott Premium to enjoy our Premium comments.

Premium member comments on news posts will feature an elevated status that increases their visibility. This tab would allow you to participate in Premium comments with other premium members. Register to join the other Premium members in elevating the conversation!

Register or Subscribe

Join the discussion!


Don't have a login but want to join the conversation? Become a Thurrott Premium or Basic User to participate