A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows 8 » Windows 8 Help Forum
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

Locky Ransomware??



 
 
Thread Tools Rate Thread Display Modes
  #16  
Old April 25th 16, 12:43 PM posted to alt.comp.os.windows-8
(PeteCresswell)
external usenet poster
 
Posts: 1,933
Default Locky Ransomware??

Per Ken Blake:
I think
that that's one of the most dangerous pieces of advice you see around,
because it implies that it's safe to do the opposite--open attachments
from friends and relatives. But many viruses (and other kinds of
malware) spread by sending themselves to everyone in the infected
party's address book, so attachments received from friends are perhaps
the *most* risky to open.


That happened to me at a place where I was doing contract programming.

Reasonable-sounding Subject line, reasonable-sounding message, somebody
I knew.... so I opened the attachment.

Won't go in to what happened next, but thankfully the AC power plug to
my PC was within easy reach...... And if somebody from the client had
been walking past before I managed to pull it, I would have found myself
out on the street within minutes.
--
Pete Cresswell
Ads
  #17  
Old May 3rd 16, 04:59 PM posted to alt.comp.os.windows-8
Ron[_13_]
external usenet poster
 
Posts: 49
Default Locky Ransomware??

On 4/24/2016 5:43 PM, (PeteCresswell) wrote:
Per son1c:
Someone encountered such a problem?
And my advice how not to be infected with locky ransomwa
1)You must keep backups of all your important information somewhere
other then on the computer you are backing up.
2)It is forbidden to open word files from anyone who you don't know in
advance is sending you a word file.


3) Learn to keep data in one place - separate from the System.

4) Back up data to a series of external devices that are
disconnected when not being backed up to. At least 3
devices.... I currently use 5.


Do you have 5 deadbolts on all of your exterior doors?
  #18  
Old May 3rd 16, 08:41 PM posted to alt.comp.os.windows-8
Paul
external usenet poster
 
Posts: 18,275
Default Locky Ransomware??

Ken1943 wrote:
On Tue, 3 May 2016 11:59:59 -0400, Ron wrote:

On 4/24/2016 5:43 PM, (PeteCresswell) wrote:
Per son1c:
Someone encountered such a problem?
And my advice how not to be infected with locky ransomwa
1)You must keep backups of all your important information somewhere
other then on the computer you are backing up.
2)It is forbidden to open word files from anyone who you don't know in
advance is sending you a word file.
3) Learn to keep data in one place - separate from the System.

4) Back up data to a series of external devices that are
disconnected when not being backed up to. At least 3
devices.... I currently use 5.

Do you have 5 deadbolts on all of your exterior doors?



Paranoid people will never have a life. I will continue to use monthly
images. Since it is crazy to figure how to restore one partition in
the middle of others on a laptop, I image the whole drive. Worked in
the past. Of course on Windows 10, picking a date is like the lottery,
GUESS WORK.


Ken1943


When they design aircraft or space ships, they put lots
of redundancy in them, to cover fairly imaginative failure
scenarios.

However, rather than casting scorn on someones idea on
protection, you should *at least* be able to demonstrate,
with your sage advice, that you have covered a primary
failure case.

It is known that the latest ransomware, encrypts the
hard drives in the computer, as well as *unmounted*
file shares from other computers (second computer is powered,
you're not using the drive as a share right now, but the
ransomware mounts it and attacks it). And that means, if
you have your backup devices all connected and operational,
your "casual" backup strategy could be *completely* wiped
out.

Think carefully about the latest intelligence on
ransomware, before jumping to any conclusions.
I'm not sure my strategy here would completely
protect me, but I can tell you that some slightly
older backups exists on two hard drives, and even
if one of the drives is currently connected and powered,
I could bootstrap a computer room recovery using the
other disk as starting materials.

Paul
  #19  
Old May 3rd 16, 10:20 PM posted to alt.comp.os.windows-8
(PeteCresswell)
external usenet poster
 
Posts: 1,933
Default Locky Ransomware??

Per Ken1943:
Do you have 5 deadbolts on all of your exterior doors?


Paranoid people will never have a life. I will continue to use monthly
images. Since it is crazy to figure how to restore one partition in
the middle of others on a laptop,


Drives fail.

One time I fried 2 or 3 drives before I realized that a USB card was bad
and wad cooking the backup drives as they were connected.

Computer stuff is not all that - and if you bet the farm on a single
device, you are headed for trouble.

And consider that drives are *really* cheap....
--
Pete Cresswell
  #20  
Old May 3rd 16, 10:21 PM posted to alt.comp.os.windows-8
(PeteCresswell)
external usenet poster
 
Posts: 1,933
Default Locky Ransomware??

Per (PeteCresswell):
Computer stuff is not all that -


SHB "Computer stuff is not all that reliable - "
--
Pete Cresswell
  #21  
Old June 30th 16, 03:34 PM
sloth sloth is offline
Registered User
 
First recorded activity by PCbanter: Jun 2016
Posts: 1
Default

Quote:
Originally Posted by son1c View Post
Hi all! My sister laptop (Windows 8.1) is infected with locky virus that encrypted all sensitive data and now it demands 0,5 bitcoins to decrypt files. It’s her fault because she opened that nasty Invoice doc file.
I tried bleeping computer removal instructions: http://www.bleepingcomputer.com/news...etwork-shares/ and this removal guide: http://manual-removal.com/locky-files/ .
Also I used Free Bitdefender Crypto-Ransomware Vaccine, but the trouble is that none of them can decrypt files, only delete all infected files.
Someone encountered such a problem?
And my advice how not to be infected with locky ransomwa
1)You must keep backups of all your important information somewhere other then on the computer you are backing up.
2)It is forbidden to open word files from anyone who you don't know in advance is sending you a word file.
The backups are the most important tip to prevent corrupting of your data. But when the problem already exists some other actions need to be taken. First, it is good to enter the PC into Safe Mode so all files and objects associated with the ransomware will be isolated. Next is the removal of Locky ransomware. There is no known working decryptor. You could try to restore some corrupted files using other methods for file restoration. In case the ransomware did’t delete shadow volume copies from the Windows operating system, some files could be restored with Shadow Explorer. Another way for data restoration is utilizing data recovery software.

Hope this information will help you!
 




Thread Tools
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off






All times are GMT +1. The time now is 12:11 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.