

(You can delete the file from within Reflect, of course.) This locks your backup images from unauthorized modification, particularly by malware. The concept is simple: only authorized applications - namely Macrium Reflect itself and a couple of very specific exceptions - are allowed to do anything to the backup images.Įven attempting to delete such an image in Windows File Explorer will generate an error and a notification. Macrium Reflect has a feature called “Image Guardian” in its paid versions to protect against just such a situation. This makes the typical ransomware protection advice - just restore a recent backup - impossible. The concern is that ransomware, as part of encrypting your files, might also encrypt files on your backup devices. Automation requires a destination for the backups - typically an external drive - being always connected and ready.

I’m a big believer in regular, automated image backups. OneDrive and Dropbox have features that will roll back your entire collection of files to a prior date, should ransomware strike. Macrium Reflect’s “Image Guardian” feature allows you to leave your backup drive connected without fear of ransomware encryption.
