Mitch_I
My general strategy is to make monthly images of the C drive and copy the image and the data on the D drive to an external drive. Would that work to recover from a ransomware attack? Not sure.
Do you leave your backup media attached and write-enabled? If so, it could easily be affected. Best practice is to only attach it and enable writes when you perform your backups and at no other times.