How it usually arrives
Most ransomware starts with a download, an email attachment or a booby-trapped link — not a dramatic break-in. XiGuard reviews incoming files and links and flags the warning signs before you open the wrong one.
Help · Ransomware
Ransomware usually arrives in a file or a link, then encrypts the documents and photos you cannot replace. Here is how XiGuard helps you catch it early and keep a way back — honestly, and within its limits.
Most ransomware starts with a download, an email attachment or a booby-trapped link — not a dramatic break-in. XiGuard reviews incoming files and links and flags the warning signs before you open the wrong one.
If a process starts rapidly changing many files, XiGuard can attribute that behaviour to it and alert you. Today this is alert-only; pausing the process so an administrator can review it is planned. Microsoft Defender remains the layer that blocks; XiGuard adds detection and review.
XiGuard helps you switch on Controlled Folder Access and the ransomware ASR rule — starting in audit mode, with your approval — so your most important folders get Windows' built-in protection.
Recovery matters most when something gets through. Native folder versions and the planned XiVault document history are different ways to keep a clean copy. Recovery only works for versions already retained.
No security tool can promise to stop every attack. XiGuard's goal is earlier detection, a clear review and a tested way back — so an incident is easier to catch and less painful to recover from.
XiGuard adds a detection-and-review layer on top of the antivirus you already have. Windows is the first platform.
Download