New
#1
Thanks for posting..
SourceRussian anti-virus company Doctor Web is warning users of an active ransomware campaign executed through brute force attack via the RDP protocol on target machines.
Once connected to the attacked PC, cyber-criminals launch a variant of the ArchiveLock Trojan, which uses the archiver WinRAR to encrypt files.
A Guy
Hi there
This isn't anything new -- we've all seen this stuff "Ad Nauseam".
If you take basic precautions and use things like MSE (or whatever decent A/V stuff you want) you really should NEVER get a virus --and even if you do provided you have proper backups and archives just re-format the disk (via a bootable read only program so it cannot be infected itself), and then restore your clean system and data.
In any case you should always regularly backup your OS and archive your data.
Sometimes I think that a lot of these viruses are actually CREATED by some A/V companies into scaremongering people to buy their products or at least pay for an upgrade. Knowing how some often seemingly quite legitimate businesses work these days it wouldn't surprise me in the least if they did this.
SIMPLE RULES:
1) SEPARATE OS FROM USER DATA (User data - music, photos, video, documents etc).
2) Backup OS Daily (use a program which allows BOOTABLE restore).
3) Archive User data regularly -- it doesn't change hugely so archive the static parts first (music files for example - once archived you don't have to back up the same files again -- only new ones).
4) Don't even THINK of opening email from unknown recipients.
5) Don't open email attachments unless you know exactly who sent them and what they are about.
6) Don't download dubious software from torrents etc -- especially things like Key gens, KMS activators etc.
7) Don't give away data about yourself -- amazing how people put confidential data on public sites like facebook -- that's the best way of "Identity theft, Internet Fraud etc.
WEB stuff : Avoid simple scams like "FREE this ---" then you have to give a Credit card number.
When downloading open source software click on the PROPER LINK -- a lot of sites are so confusing (deliberately) so you click on what you think is the program and then it's either something like "Managed download" or a particularly annoying one is the AVS video converter (pay for) rather than the program you are actually trying to download.
NEVER use those online "Fix your registry" or "find drivers for you" programs. The Driver one is a particularly nasty piece of Sneakware as it might find a driver but then will ask you to PAY to access the site. Drivers these days are all in PUBLIC DOMAIN especially if you HAVE the hardware so should be free.
If you can test software in a VM before installing on your main machine so if it doesn't work you haven't lost any time etc - just delete the VM.
Be careful also of Websites that LOOK like legit Bank sites etc etc. Also when buying online choose reputable suppliers.
Internet FRAUD / Identity theft is FAR FAR more a problem than Viruses on individual users machines --these days hackers are more likely to attempt cyber crime against institutions like FBI, NYSE, NASDAQ,BANKS and large global multi-nationals.
Cheers
jimbo
Last edited by jimbo45; 20 Mar 2013 at 03:24.
Another reason to create HDD images (often) and have external backup copies.
A lot of good suggestions jimbo45. :)
Every good post jimbo, I've seen many OP's use driver programs and registry cleaners, and my first response is: Remove program(s), scan for malware and then scan for corrupted system files.