[Windflier]

The CryptoLocker virus is being called one of the worst computing threats ever seen, but so far there's only been one other thread posted about it on the forum.

I'm posting this news from a second source so more Freepers become informed about this active threat to their computers and files.

[GeronL]

I think there have been two.

One suggested a change to your files, encrypt them yourself first.

Another suggested something called Crypto-Protect

[Windflier]

Related FR thread: Semi-VANITY : Prevention of New Virus sweeping the Interwebs: CryptoLocker

[dfwgator]

I wonder if you have Dropbox, and this thing encrypts the files in your local Dropbox folder, if then Dropbox is going to sync up those encrypted files on all your devices.....if so, OUCH!!!!

[discostu]

Anybody that downloads software from foolishit.com is probably gonna regret it.

[palmer]

Seems like this is just a LIPCU tax. I will be the first in this thread to say I just upgraded to Mavericks for free, and apart from some heavy reindexing CPU usage I am very pleased with the performance. As for security, I don’t dwell on that very much.

[fr_freak]

The Crypto Locker virus is sent to users through emails that have innocent enough looking senders, such as UPS or FedEx...The program disguises itself as a JPEG, PDF, or other Microsoft Office file.

Part of this problem is the absolutely ridiculous option in Windows of hiding file extensions, an option which used to be the default (don't know how Win7 or Win8 handles it). So, instead of seeing the email attachment as imgoingtoscrewyou.pdf.exe, the user just sees imgoingtoscrewyou.pdf and thinks "What harm can a PDF file do?"

[jdege]

I don’t see anything about its incubation period.

Does it infect the files, then immediately start demanding ransom? Or does it infect the files, and then wait a few weeks so that your current backups will be infected, as well?

If there’s no incubation period, I can’t see how this is any worse than a HD failure - just restore from backup and carry on.

(If you don’t have automated backups running at least daily, I’m sorry, but you truly are too stupid to be running a computer.)

[Terry L Smith]

Since it is “new”, ( I remember the big bruhaha about an FNI screen popping up freezing your computer, earlier this year), it seems as though this is something that will always follow a new Windows release, i.e., sys7 or sys8. Also, as long as folks use Internet Explorer, this might be able to slip in.

I use Waterfox, a Mozilla derivative, and Microsoft Essentials. I got rid of Microsoft Office, since I am a retired journalist, (no matter what or how Washington wishes to define it).

[Moltke]

Once infected brute force hacking your files back is not really something to be considered as the files are RSA-encrypted with strong backup technology.

Better call Saul the NSA!

(But as it seems (per the article) to propagate through email attachments, I'm not really worried. The 'threat' is only to those who cannot discriminate bogus emails. Email scams have been around for a looong time.)

[E. Pluribus Unum]

CryptoPrevent is a tiny utility to lock down any Windows OS to prevent infection by the Cryptolocker malware or ‘ransomware’, which encrypts personal files and then offers decryption for a paid ransom.

[Covenantor]

Sure sounds like the basic plot premise of Neal Stephenson’s “Reamde”.

Life imitating art?

[Venturer]

The thing I cannot understand is why these people are not in jail.

They ransom computers-—ectortion.

You send them money, how hard could it be for the FBI with all its, super powers to find where the money goes and bust this bunch?

[ZULU]

These people should be skinned alive

[Mears]

bfl

[The Great RJ]

You should already be backing up your important files especially your digital photos anyway. External hard drives are cheap and there are cloud storage sites that will provide a limited amount of storage for free. To be really safe I back up my photo files on flash drives and store them in my bank safety deposit box.

[NoCmpromiz]

The CryptoLocker virus is being called one of the worst computing threats ever seen...

There's this from Malwarebytes...

Cryptolocker Ransomware: What You Need To Know

[I want the USA back]

Any operating system that is so full of holes that this can happen, is nothing but junk.

[Zathras]

Malwarebytes just picked up 3 files which got past Kaspersky.

[Windflier]

How to block this infection from running on other computers on your computer.

You can use Software Restriction Policies to block executables from running when they are located in the %AppData% folder, or any other folder, which this thing launches from. See these articles from MS:

http://support.microsoft.com/kb/310791
http://technet.microsoft.com/en-us/library/cc786941(v=ws.10).aspx

This can also be set up in group policy.

File paths of the infection are:

C:\Users\User\AppData\Roaming\{213D7F33-4942-1C20-3D56=8-1A0B31CDFFF3}.exe (Vista/7/8)

C:\Documents and Settings\User\Application Data\{213D7F33-4942-1C20-3D56=8-1A0B31CDFFF3}.exe

Please see further instructions at this link to manually protect your computer from the CryptoLocker virus.

[narses]

+

Freep-mail me to get on or off my pro-life and Catholic List:

Add me / Remove me

Please ping me to note-worthy Pro-Life or Catholic threads, or other threads of general interest.