Question ransomware protection?

[Rocketman122]

I have 1 ssd drive that is c:\
I have 2 other hdd that are also connected through sata. I dont care if they screw with my c:\ drive but I have pictures on my 2 hdd which are mirrors. is there a way for me to install a switch to turn them on and off as I need to move files to them?
meaning using 1 at a time

is there a way to mount the hdd's externally in some case but run them from an internal sata to have maximum speed, vs usb ?
cheers

 

[Harry_Wild]

Either disconnect the SATA connector of you HD if it an internal drive or disconnect the USB cable if it is an external drive.

You can buy a case to convert your internal drive to external drive and use USB 3.0 and maybe now USB-C if you have a recent PC. It cost around $50-$80.

I have a 3TB portable hard drive that I put all my movies, TV shows and music on and just go from one TV to another. I sold all my dvds and cds. I have a portable backup 4TB drive as an emergency and update it twice a year.

 

[Rocketman122]

im looking to connect my 2 hdd in a case and connect it to the sata connection on the mb. I could wire it through the rear expansion ports. something with a switch on it to power it on off while the pc is running

not interested in usb connectivity. PLEEEEAASE! dont bring up usb.

 

[corkyg]

Your title suggests your concern is security, but your post does not mention security. What is your objective?

 

[killster1]

im looking to connect my 2 hdd in a case and connect it to the sata connection on the mb. I could wire it through the rear expansion ports. something with a switch on it to power it on off while the pc is running

not interested in usb connectivity. PLEEEEAASE! dont bring up usb.

why are you so paranoid? just backup your files, maybe a USB 10tb

 

[Harry_Wild]

Well, you can just use a 1" X 6" and do a double shelf. Extend both power cable and SATA III cables through the expansion slots. Anytime you want to disconnect the two; just the disconnect power cable(s) before turning on the PC! It cheap, easy solution. Just make sure there is no small animals and/or babies nearby or have a cover over it.

Not sure why you are against USB 3.0. It a little faster to the SATA III 550MB/s in terms of read and write speed and 3.0 is 625 MB/s. It a little faster then that of the SATA III interface. If you use a USB 3.1; you get 1250 MB/s; double that of the SATA III!

https://appuals.com/usb-2-0-vs-usb-3-0-vs-usb-3-1-which-should-you-have-and-why/

https://www.akitio.com/information-center/achieve-best-transfer-speeds-external-drives

 

[Rocketman122]

Your title suggests your concern is security, but your post does not mention security. What is your objective?

im a photographer and my friend photographer got ransomware, so out of fear, I need to protect my internal hhd.

why are you so paranoid? just backup your files, maybe a USB 10tb

im a photographer and my friend photographer got ransomware, so out of fear, I need to protect my internal hhd.

im not interested in USB. not interested. nothing to talk about. leave it please. cater to what I need, not what you would do.

im curious if there is a switch I can install between the hdd 4pin connector and the psu so I can turn the drives on and off as I need (while the pc is on)

scenerio: I finished a wedding, I want to transfer images to 1 of my (I have 2 mirror backups) hdd for immediate backup. then after its done, turn the hdd off (with some switch) and
then turn on the other hdd and copy the same images over to it. only have 1 hdd on at any given time.

my mb GA-970A-DS3P FX supports uab 3.1 gen 1. no esata. so I want to have the hdd connected to the inside sata ports but to add some switch that can power the hdd on/off as I need

is it even possible to hot activate/shutdown a hdd (not c:\) while the pc is running and connected to sata?

 

[Insert_Nickname]

is there a way to mount the hdd's externally in some case but run them from an internal sata to have maximum speed, vs usb ?
cheers

There is eSATA(p), but that's somewhat died out due to USB UASP. Or Thunderbolt, but that's a quite a bit harder to add and way more expensive.

If you can still find an external eSATA(p) case and an adaptor from regular SATA or an add-in card, that'd be the best solution, since you can physically disconnect the HDD when not in use.

im not interested in USB. not interested. nothing to talk about. leave it please. cater to what I need, not what you would do.

I'm genuinely curious here. Why? If you don't want to post about it, just send a PM.

 

[corkyg]

You can also use anti-malware programs that protect against ransomware,

 

[Harry_Wild]

https://www.newegg.com/Product/Prod...rive case&bop=And&PageSize=36&order=BESTMATCH

All use USB!

 

[killster1]

im not 100% sure how turning the drive off protects it. why not use encryption and keep that pc offline? never will be hacked if never goes online (unless ur brother or mission impossible breaks in to your house)

with that said i have plenty of enclosures that are usb/esata and yes you can buy a bracket to plug the esata into the back of your pc. ( usb card with esata also or just a esata pci card)

Sounds like a good reason to upgrade your ports on your pc with a whole new build but that would just be my excuse.

 

[toad096]

In my opinion, you need a "mobile rack".

I use the following, which I built into my tower case:

https://www.delock.com/produkte/1167_5-25-/47209/merkmale.html

This has a on/off switch. I keep the drives powered off and only power on to take backups. Both backup drives run at full SATA3 speed.

P.S. In addition I also take backups with a USB3 Docking Station.
P.P.S I also store a full set of backups off-site.

 

[corkyg]

Good comment. I too use mobile racks. I have three installed - and each can handle a HDD or SSD, and can be turned on and off. I keep two for alternating drives. I switch boot drives every Sunday AM. The third is a backup data drive. I also have MBAM Premium installed which protects against ransomware.

 

[Harry_Wild]

A portable exterior 2.5” 3GB HD is around $125!

 

[Rocketman122]

In my opinion, you need a "mobile rack".

I use the following, which I built into my tower case:

https://www.delock.com/produkte/1167_5-25-/47209/merkmale.html

This has a on/off switch. I keep the drives powered off and only power on to take backups. Both backup drives run at full SATA3 speed.

P.S. In addition I also take backups with a USB3 Docking Station.
P.P.S I also store a full set of backups off-site.

FINALLY! someone who recommended something I need versus what they thinks I should buy

read the posts before replying. I said no usb. SATA ONLY! internal hdd ONLY! read the damn post before replying

BRAVO @toad096 that will solve what I need !

-----------------------------------------------------------
@killster1

"Sounds like a good reason to upgrade your ports on your pc with a whole new build but that would just be my excuse."

are you paying for my new pc? cause I dont have money. dont suggest anything other then what the op asks help with,

-----------------------------------------------------------------------
@corkyg

im not going to install any encrypting software. a friend did that and the software couldnt find it. had to format the hdd. encryption- no thanks.

 

[aigomorla]

the only way to protect written data is on something which can not be rewitten period.
IF you already have that malware in your system it wont matter if u swap stuff out, the moment u access it, it will embed the worm inside the file.

If its on a optical or tape backup with the media locked for write, then you can view it as many times as you like and the worm can try as hard as it wants to write on unwritable media.

However the best way to not get a ransom virus is to NOT download stuff your not familar with, and do not open shady links you may get in email.

Othewise there is no such thing as randomware protection.

 

[gea]

Ransomware encrypts data. It prefers older files so you may detect the problem very late, too late. When you attach a backup disk it may decide to encrypt the backup disk first. When you have network disk attached Ransomware may decide to encrypt them first.

As Ransmware may got local/remote admin permissions it may delete even "Windows Shadow Copies" and network shares so you lost some undo capapilities.

In the end, your local disk may be encrypted, backup (all or some) as well as your network shares.

The Solution;
- Keep you data not on Windows but an external non-Windows NAS.
- use ZFS and Snaps. These Snaps are readonly and even a Windows admin cannot destroy
You can take as many snaps as you like (one per minute, hour, day, week etc) so in any case you will find valid unencrypted data prior encryption.

- use ZFS and disaster backups (fire, theft, sabotage etc)
Even ZFS cannot protect against a real disaster. For daily protection ZFS, Snaps and Raid is perfect.

 

[hoorah]

You should ask for your money back with all the bad advice people have given you.

To answer your question in a practical way, we protect our business against ransomware by staggered backups which still come from the same source. Having alternating sources is too cumbersome for the constant in/out of data, but then, we have multiple users all accessing the same data. An on/off solution may work for you, as I suspect you are doing this alone, because I can't imagine with your attitude anyone would ever be able to stand working with you.