TeslaCrypt ransomware now impossible to crack, researchers say

[Brds7t7]

Prevent ransomware
Cryptoprevent works very well. It sets in place around 300 software policies to block the ransomware from running/encrypting. It's one of the first things I install on any pc.
It actually works at blocking many other viruses from running too.
Also, if you're using chrome, I would set plugins to "Run on Request".

 

[HAVOC]

Where's the best place to download Cryptoprevent?

 

[Brds7t7]

Where's the best place to download Cryptoprevent?

https://www.foolishit.com/cryptoprevent-malware-prevention/

A couple of videos showing it working:

https://www.youtube.com/watch?v=Iq6wisnM4Ws

https://www.youtube.com/watch?v=M4dNuZYGgMM

 

[HAVOC]

Downloaded and installed.
Thanks

 

[Brds7t7]

Always a good one to have in the security toolkit!

 

[Hellriser]

Malwarebytes also launched an open beta for their Anti-Ransomware. Anyone got some experiences to share with this one?

Malwarebytes Anti-Ransomware Beta

 

[Brds7t7]

Malwarebytes also launched an open beta for their Anti-Ransomware. Anyone got some experiences to share with this one?

Malwarebytes Anti-Ransomware Beta

I've tried it in VM's. Definitely wouldn't install on any main systems though. It still needs a lot of work. Seems to be a bit too aggressive right now and has a huge amount of false positives. Also, CryptoPrevent is free. MBARW will only be in the paid product once it comes out of beta.

 

[HAVOC]

Always a good one to have in the security toolkit!

I have this and other security/utility related software in a folder called "Utilities". I have it saved to a thumb drive for use on peoples computers that need "fixing".

If Cryptoprevent blocks something, is there a log file or pop-up that lets me know what and when it happened?

 

[Brds7t7]

Always a good one to have in the security toolkit!

I have this and other security/utility related software in a folder called "Utilities". I have it saved to a thumb drive for use on peoples computers that need "fixing".

If Cryptoprevent blocks something, is there a log file or pop-up that lets me know what and when it happened?

As it uses Windows software policies it will probably have an entry in the event log although I'm not 100% sure. It will pop up a notice to say when software has been blocked though.
I'm not really that interested in logs, as long as it' doing its job, I'm happy.
The only software I've had to Whitelist was uTorrent as newer versions run from the AppData Roaming folder which CryptoPrevent blocks by default.

 

[groze]

Does Google Chrome sandbox flash enough to prevent TeslaCrypt ransomware?

 

[Brds7t7]

Does Google Chrome sandbox flash enough to prevent TeslaCrypt ransomware?

I don't think anything is 100%, but together with an AdBlocker and only running plugins on demand it'll certainly help.
CryptoPrevent does block TeslaCrypt though.

 

[GEWB]

...how the ransomware got onto the PC ....

By visiting "dodgy" websites with compromised Flash based adverts - like BBC, Yahoo, MSN

Major sites including New York Times and BBC hit by 'ransomware' malvertising | Technology | The Guardian

Nothing to click on. No user actions required. Just Flash doing its thing.

Years ago my dad got hit (he was in hism 80s) - dropped 160,000 files into ONE directory on his HD. Do you know what that does to a Windows computer? Brings it to it's knees.

I used Linux to do the cleanup but even then I could only delete 5000 files at a time (no I couldn't delete on the directory level).

All of this was caused by a Flash drive by exploit that was served up as an ad on CNN.

I removed Flash.

Regards,
GEWB