malwarebytes stops ransomware.... for now.
Otherwise do the following:
These newer ones have a new delivery method now - Javascript attachments. Since most people have the default turned on in Explorer - not to show file extensions - they will name a file something like Invoice.txt.js.
Since the .js extension doesn’t show up, the file looks like Invoice.txt. Most people will assume that is safe to open ( Microsoft doesn’t help matters, because the default icon for a javascript extension resembles a document icon ). People will click on this and it will execute the script, connecting to a download server, fetching the actual ransomware in the form of a Windows program (an .EXE file), and launching it to complete the infection.
The way to counter this is to create a text file with notepad and rename it with the js extension. Then right click on it and tell it to open this with Notepad from then on. Start button> Run and type notepad then click ok.
I have the directions copied in then I go to File> Save as the choose Save as type: All files then type in a file name like stop ransomware.js
This way if one accidentally downloads one of these and clicks on it, it won’t execute.
I have an easier method.
I delete anything where I do not know the sender OR even if I do know the sender, if I don’t recognize the topic I delete it.
If its important, it will come back.