New Trojan Malware Encrypts All Files, Demands Ransom

Page 1 of 2 12 LastLast

    New Trojan Malware Encrypts All Files, Demands Ransom


    Posted: 17 Mar 2013
    Russian anti-virus company Doctor Web is warning users of an active ransomware campaign executed through brute force attack via the RDP protocol on target machines.

    Once connected to the attacked PC, cyber-criminals launch a variant of the ArchiveLock Trojan, which uses the archiver WinRAR to encrypt files.
    Source

    A Guy
    A Guy's Avatar Posted By: A Guy
    17 Mar 2013



  1. Posts : 1,514
    Win 7 Home Premium SP1 32 bit
       #1

    Thanks for posting..
      My Computer


  2. Posts : 509
    Windows 7 Home Premium 64-bit SP1
       #2

    Now that's new, thanks for posting.
      My Computer


  3. Posts : 2,686
    Windows 8.1 Pro w/Media Center 64bit, Windows 7 HP 64bit
       #3

    Dr Web found this in Aug 2012 but now it is showing up a lot more. I assume that not allowing Remote Desktop connections they can't get in and by now I would think that AV software would pick this up. But the article doesn't say much about it.

    New Trojan Malware Encrypts All Files, Demands Ransom-rdp.png

    Jim
      My Computer


  4. Posts : 5,941
    Linux CENTOS 7 / various Windows OS'es and servers
       #4

    Hi there
    This isn't anything new -- we've all seen this stuff "Ad Nauseam".

    If you take basic precautions and use things like MSE (or whatever decent A/V stuff you want) you really should NEVER get a virus --and even if you do provided you have proper backups and archives just re-format the disk (via a bootable read only program so it cannot be infected itself), and then restore your clean system and data.

    In any case you should always regularly backup your OS and archive your data.

    Sometimes I think that a lot of these viruses are actually CREATED by some A/V companies into scaremongering people to buy their products or at least pay for an upgrade. Knowing how some often seemingly quite legitimate businesses work these days it wouldn't surprise me in the least if they did this.


    SIMPLE RULES:

    1) SEPARATE OS FROM USER DATA (User data - music, photos, video, documents etc).
    2) Backup OS Daily (use a program which allows BOOTABLE restore).
    3) Archive User data regularly -- it doesn't change hugely so archive the static parts first (music files for example - once archived you don't have to back up the same files again -- only new ones).
    4) Don't even THINK of opening email from unknown recipients.
    5) Don't open email attachments unless you know exactly who sent them and what they are about.
    6) Don't download dubious software from torrents etc -- especially things like Key gens, KMS activators etc.
    7) Don't give away data about yourself -- amazing how people put confidential data on public sites like facebook -- that's the best way of "Identity theft, Internet Fraud etc.

    WEB stuff : Avoid simple scams like "FREE this ---" then you have to give a Credit card number.
    When downloading open source software click on the PROPER LINK -- a lot of sites are so confusing (deliberately) so you click on what you think is the program and then it's either something like "Managed download" or a particularly annoying one is the AVS video converter (pay for) rather than the program you are actually trying to download.

    NEVER use those online "Fix your registry" or "find drivers for you" programs. The Driver one is a particularly nasty piece of Sneakware as it might find a driver but then will ask you to PAY to access the site. Drivers these days are all in PUBLIC DOMAIN especially if you HAVE the hardware so should be free.

    If you can test software in a VM before installing on your main machine so if it doesn't work you haven't lost any time etc - just delete the VM.

    Be careful also of Websites that LOOK like legit Bank sites etc etc. Also when buying online choose reputable suppliers.

    Internet FRAUD / Identity theft is FAR FAR more a problem than Viruses on individual users machines --these days hackers are more likely to attempt cyber crime against institutions like FBI, NYSE, NASDAQ,BANKS and large global multi-nationals.

    Cheers
    jimbo
    Last edited by jimbo45; 20 Mar 2013 at 03:24.
      My Computer


  5. Posts : 4,049
    W7 Ultimate SP1, LM19.2 MATE, W10 Home 1703, W10 Pro 1703 VM, #All 64 bit
       #5

    Backup HDD Image


    Another reason to create HDD images (often) and have external backup copies.

    A lot of good suggestions jimbo45. :)
      My Computer

  6.    #6

    Every good post jimbo, I've seen many OP's use driver programs and registry cleaners, and my first response is: Remove program(s), scan for malware and then scan for corrupted system files.
      My Computer


  7. Posts : 4,161
    Windows 7 Pro-x64
       #7

    Another good reason to turn off SNMP.
      My Computer


  8. Posts : 1,397
    Win 10 Pro 64
       #8

    Thanks for posting this.
      My Computer


  9. Posts : 18
    Windows 7 Home Premium 64x
       #9

    Good to know, thanks
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 06:45.
Find Us