Select a behavior mode for Ransomware Protection

If you think Ransomware Protection displays alerts too frequently, check if the Ransomware Protection behavior is set to Smart Mode.

If Ransomware Protection is set to Strict Mode, your Norton product notifies you whenever any application attempts to modify files in your protected folders.

You can adjust how sensitively Ransomware Protection monitors applications that attempt to access files in your protected folders.

Select your preferred behavior mode

1. Open your Norton device security product.

2. On the left pane, click Security.

3. Navigate to Advanced Security > Computer > Ransomware Protection.

4. In the Ransomware Protection window, click the Settings tab.

5. Under Select your preferred behavior mode, select one of the following modes:

   • Smart Mode (Recommended): Besides Allowed programs, Ransomware Protection allows commonly used trusted programs to modify files in your protected folders. Ransomware Protection maintains a list of trusted programs. If any program not on this list attempts to modify files in your protected folders, you are notified and asked for permission.

   • Strict Mode: Only Allowed programs can change or delete files in your protected folders. Your Norton product notifies you for permission each time any other program attempts to modify files in your protected folders. Selecting this option may result in your Norton product notifying you frequently.

Need more help?

• Protect your data from Ransomware threats

• Learn more about ransomware attacks

• Open unsafe and untrusted programs in Sandbox

• Learn more about Cloud Backup

• Learn more about Norton Scans