Podcast #128: We chat with Kent C Dodds about why he loves React and discuss what life was like in the dark days before Git. Listen now.

Questions tagged [ransomware]

Ransomware is a lethal kind of Malware that Encrypts your harddrive(s) and holds them hostage, providing the decryption key if you pay the hostage-taker(s) money (well-known variants are the FBI Virus and the Police Virus).

Filter by
Sorted by
Tagged with
0
votes
1answer
128 views

Can ransomware virus be removed from an affected PC? [duplicate]

I have had a ransomware attack that has only encrypted some files. Is there any way to find the virus and prevent it from encrypting more files?
0
votes
0answers
74 views

.[fileslocker@pm.me] virus [duplicate]

I have one PC (Windows 7) which is attacked presumably by a ransomware (in spite of having regularly updated antivirus viz Net Protector AV). What I could see is this -- In MySQL/bin folder, all files ...
0
votes
0answers
123 views

DNS hijacking to infect computers with ransomware?

While speaking to a friend regarding protecting personal computers from ransomware, I mentioned that I use a limited user account with application white-listing via SRP (I am running Windows). He ...
0
votes
0answers
651 views

How are ransomware keys found?

I'm familiar how ransomware works and how they encrypt the files. If the encryption is done by a public key only (which the private is saved at the attacker's server), you cannot decrypt those files ...
0
votes
1answer
297 views

JavaScript Malware attack vector

I've been reading a bit lately about pure JavaScript ransomware attacks. The Sophos seems to imply that this a a browser based attack and that you're infected by only visiting the site. I can't ...
0
votes
2answers
680 views

Is a insecure VM in a secure host vulnerable to wannacry?

Assume a reasonably secure windows host (latest windows updates/patches, up-to date enterprise antivirus). How vulnerable is in this context a VM with a not up to date windows OS and an old and not ...
-1
votes
1answer
102 views

How to find which program encrypted my files? [closed]

I've been infected by a ransomware and all files have extension .lin. how can i find the program that encrypted my files ?
-1
votes
1answer
2k views

What file extensions do ransomware encrypt? [closed]

Is someone have a generic list of files that payment walls encrypt? I want to build software to protect only those kind of files. I know that this changes from time to time. Let me know if the list ...
-1
votes
1answer
236 views

I have been attacked with a ransomeware, with all my files converted into .besub extension [closed]

I have been attacked with a ransom malware, with all my files converted into .besub extension. And the hacker left a note and asking for ransom. Obviously the data is important and I want it back. ...
-1
votes
2answers
152 views

Ransomware that attacks only mapped drives

Is it possible that ransomware attacks only mapped drives and not the local drive?
-1
votes
1answer
97 views

Online traffic monitoring by ISP for safety purposes [closed]

I have a question regarding approach to online security and protection against viruses, malware and phishing by one of the biggest European ISP. Below you will find my understanding of the topic. Is ...
-1
votes
2answers
169 views

Limit possible harm of ransomware on a fileserver

First to say: I know I need a backup and I have one of course but my question isn't about the safety of the data but about how to reduce the possible time that is needed to restore data. I'm already ...
-2
votes
2answers
812 views

Is it possible to break any encryption by knowing the data that was encrypted? [duplicate]

I have very basic Idea about encryption/decryption and was wondering if we can break any encryption using this method. By break I mean to retrieve the encrypted data and the key.Possibly finding ...
-2
votes
1answer
164 views

Can Ransomware impersonate a Windows Domain Account?

Ransomware (Globe Imposter) was found on one of our production servers. The executable was found in the documents folder of one of our employees on the same server. A Windows Scheduled Task was also ...
-2
votes
2answers
375 views

Cryptowall encryption files

This is a question concerning the way the Cryptowall ransomware encrypts files on the victim's computer. Someone knows if it is possible to recover the encryption key comparing the encrypted file and ...
-2
votes
1answer
453 views

BitLocker versus CryptoLocker

Can BitLocker be an effective protective measure against cryptolockers and ransomware class of attacks? Were there evidences of (un)successful intrusion/encryption attempts on volumes with enabled ...
-2
votes
2answers
267 views

How to stop cryptolocker attacks? [duplicate]

There are many crypto viruses being launched and this crypto virus is very painful for any system. All your data, songs, movies, pictures, and many other docs and project files are encrypted. How to ...
-2
votes
1answer
175 views

Teslacrypt Ransomware [duplicate]

I would like to know how to decipher a Windows 7 system that has been infected with a variant of Teslacrypt that: Encrypts a bunch of files and adds up "mp3" extension to theim Creates new files in ...
-3
votes
1answer
2k views

SQL Server infected with Troldesh ransomware with DB backup files [closed]

The SQL server was infected by a ransomware virus. Files has been modified as FileName.7z.id-38199C3A.diablo_diablo2@aol.com. Unfortunately all the DB backup files were also stored on the C: drive. I ...
-4
votes
1answer
65 views

After have all the Patches, NotPetya can still run? [closed]

NotPetya runs inmediatly after infection or can be there and being executed even do i have all the security patches?
-5
votes
1answer
341 views

RC4 and Crypto Ransomware [closed]

If we allow no RC4 support on any devices, will Crypto Ransomware be slowed down or eliminated? Is this a patching and not a malware problem? Can we block this threat at the packet level?
-9
votes
2answers
394 views

WannaCrypt-style SMB exploits known since Stuxnet, circa 2008, but Microsoft hid fixes from us. So what is new now? [closed]

WannaCrypt-like SMB spreading technique was widely used in Stuxnet, as docummented by Symantec and Kaspersky. Read this: W32.Stuxnet Dossier (2010,Symantec PDF) Now we have the name of the exploit: ...