User's Manual

124 Copyright © Acronis International GmbH, 2003-2020
Note By pausing the protection, you deactivate Active Protection (Real-time protection, Antiransomware
protection, and Web filtering). Scheduled on-demand scans will not start.
On the Activity tab of the dashboard, you can view a log of the changes that you applied to your
protection status and settings.
In this section
Active protection ............................................................................................................. 124
Antivirus scans ................................................................................................................ 128
Managing detected issues .............................................................................................. 129
Managing files in Quarantine .......................................................................................... 130
Configuring Protection exclusions .................................................................................. 130
Protection for Zoom, Cisco Webex, and Microsoft Teams ............................................. 131
Downloading Protection updates ................................................................................... 131
8.1 Active protection
To protect your computer from malicious software in real-time, Acronis True Image 2021 uses the
Acronis Active Protection technology.
Active Protection constantly checks your computer for ransomware, cryptomining processes, viruses
and other malicious threats, and provides Web filtering while you continue working as usual. In
addition to your files, Acronis Active Protection protects the Acronis True Image application files,
your backups, archives, and the Master Boot Records of your hard drives.
Active protection consists of several protection levels that you can enable independently from each
other:
 Anti-ransomware protection
 Real-time protection
 Web filtering
Antiransomware protection
Ransomware encrypts files and demands a ransom for the encryption key. Cryptomining malware
performs mathematical calculations in the background, thus stealing the processing power and
network traffic of your machine.
When the Antiransomware Protection service is on, it monitors in real time the processes running
on your computer. When it detects a third-party process that tries to encrypt your files or mine
cryptocurrency, the service informs you about it and asks if you want to allow the process to
continue or to block the process.
To allow the process to continue the activity, click Trust. If you are not sure if the process is safe and
legal, we recommend that you click Quarantine. After this, the process will be added to Quarantine
and blocked from any activities.
Recovering your files after blocking a process
After blocking a process, we recommend that you check if your files have been encrypted or
corrupted in any way. If they are, click Recover modified files. Acronis True Image 2021 will search
the following locations for the latest file versions to recover.
 Temporary file copies that were preliminarily created during the process verification
 Local backups