OneDrive Files Restore and Windows Defender takes ransomware protection one step further

April 30, 2018

At the beginning of April, OneDrive announced new protection capabilities that offer Office 365 Home and Office 365 Personal subscribers additional peace of mind including the ability to recover files from malicious attacks like ransomware and new tools to help keep your information secure and private. This included bringing the powerful OneDrive for Business feature, Files Restore, to your personal OneDrive account.

Today, we are taking this protection one step further with the integration of OneDrive Files Restore and Windows Defender Antivirus. This will further protect you from ransomware attacks by identifying the breach and guiding you through remediation and file recovery, so you don’t have to submit to cybercriminal demands if your files are in OneDrive.

Saving your files to OneDrive gives you an additional layer of protection from ransomware. If a ransomware threat is found on your device, Windows Defender will notify you of the threat, help you remove the ransomware from your device, and give you the option to use OneDrive Files Restore so you can recover your OneDrive files to the state they were in before the attack occurred. The date and time that Windows Defender detected the attack will be pre-selected in Files Restore, making the process simple and easy to use.

Files Restore and Windows Defender integration is available for Office 365 Home, Office 365 Personal, and OneDrive for Business users. This integration is beginning to rollout to Windows Insiders today and will be available to all Windows 10 April 2018 Update users in the coming weeks. Learn more about the protections available to Office 365 Home and Personal subscribers.


 After removing the ransomware from your device, you can start the OneDrive Files Restore process by clicking the notification


Files Restore opens with the date and time of the attack pre-selected, so you can restore your files to before they were compromised