Feedback by UserVoice

I suggest you ...

Provide Ransomware detection and recovery

We are seeing an increase in this cases of cryptowall and ramsonware, were users see their computers infected with this virus.

The virus will encrypt all user files (jpg, pdf, xlsx,docx, etc.) except system files.

It would be very helpful, to have the option to have OneDrive files restored to a previous date, even if that option was only available at a OneDrive Support level.

If this option is not possible, due to server space to store all info in duplicated, it would be easier from the technical side to block .ccc, .micro, and other known file extensions in OneDrive.

This would preserve the integrity of the user's files stored in OneDrive and add an extra layer of user's files stored in OneDrive.


2,093 votes
Sign in
Sign in with: Facebook Google
Signed in as (Sign out)
You have left! (?) (thinking…)
Alex T. shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →
boom! it's done  ·  Douglas Pearce responded  · 

Big update — Today we’re rolling out ransomware detection & recovery for Office 365 Home & Personal subscribers. We can now detect ransomware attacks and help you restore your OneDrive to a state before files were compromised. If an attack is detected, you will be alerted through an email, mobile, or desktop notification and guided through a recovery process where you’ll be able to restore your files to the state they were in before they were compromised.

To enable the recovery process, we’re bringing over the Files Restore feature from OneDrive for Business to your personal OneDrive account. Files Restore allows you to restore your entire OneDrive to a previous point in time within the last 30 days. In addition to helping recover from an attack, Files Restore helps with an accidental mass delete, file corruption, or other catastrophic event.

For more information, check out our blog post here —


Sign in
Sign in with: Facebook Google
Signed in as (Sign out)
  • Remove All Virus commented  ·   ·  Flag as inappropriate

    Ransomware malware is very hard to deal with. It could lots of time to just identify the malware. And for the Data recovery, it is another very difficult process because you can recover your files without decryption key. Paying ransom money is not an option because you cannot trust the hackers. But it is better to try something rather than doing nothing. So i thought and found this option to remove ransomware virus and recover my files. If you want some help then read this guide carefully

  • Paul Fisher commented  ·   ·  Flag as inappropriate

    We need this in ODFB as well, including alerts to system admins so the IT organization can react!

  • Allan commented  ·   ·  Flag as inappropriate

    Great news that it has been implemented for consumers, but does the ransomware detection part apply to OneDrive for Business as well? It isn't clear to me after having read the blog post.

  • Anonymous commented  ·   ·  Flag as inappropriate

    Restoring files is a pain especially when there is a large amount to restore.

  • Anonymous commented  ·   ·  Flag as inappropriate

    You cannot restore individual files that have been encrypted by ransomware. OneDrive thinks that it is a new file and has no history. This makes OneDrive a very poor choice for cloud storage and I cannot continue to use it for myself, my business, nor recommend it at all. The entire drive needs to be restored, individual folder restores, and option to prevent encryption (if possible).

  • Anonymous commented  ·   ·  Flag as inappropriate

    This feature would a great addition. Click a button to do a restore of a user OneDrive folder. This would also be beneficial if a user left a company and moved or deleted all their One Drive files on their way out the door.

  • Ken Johnson commented  ·   ·  Flag as inappropriate

    Something to keep in mind for all those who may have been hit by ransomware. You can open a support case with Microsoft and have them restore all your OneDrive files to a previous date that you specify. Just be prepared to wait 1 or more days for the request to be completed. Just tell them that you got hit by a ransomware attack and need to rollback to a certain date and they will handle it. That said, if we had a way to do a rollback ourselves as soon as we realized there was a problem, then the turnaround would be much faster and it would free up Microsoft support to handle other support requests. I think this feature would be a win/win for Microsoft and its customers.

  • Alpesh commented  ·   ·  Flag as inappropriate

    Hello, if this option is available to restore direct Folder for prevision version this is best now we are using business onedrive.

  • Jonay commented  ·   ·  Flag as inappropriate

    I agree. Nowadays with all those Ransomwares around It would be a great addition.

  • Jonay commented  ·   ·  Flag as inappropriate

    It would be great to have such an option. I mean, the option to revert Onedrive (or a single folder) to a previous date. Now that we have version history for all types of files I think that It's something that would be done and would be great against this kind of malware.

  • Anonymous commented  ·   ·  Flag as inappropriate

    2 months down the line, but you are still thinking about this. It would be nice if OneDrive is user needs driven.

  • Anonymous commented  ·   ·  Flag as inappropriate

    Cloud is the best defence against ransomware, this feature is important!!

  • Colin commented  ·   ·  Flag as inappropriate

    Annoyingly the previous versions of files is not available via the API either, as it would be trivial to write a script to restore the previous n - 1 versions, or the previous day's state.

  • Simon Limberg commented  ·   ·  Flag as inappropriate

    Also add for entire OneDrive root folder, for full restore to previous days (in case of ransomware attacks and wipers etc).

← Previous 1 3 4

OneDrive Archive:

Feedback and Knowledge Base