... OS .. I see machines come into the shop with Avast, McAfee, Symantec .. and people complain their machines are running slow .. The only protection against ransom ware is regular backups that you insert the backup drive, run the backup and REMOVE the backup drive .. because most ransomware can jump ...