Free Republic
Browse · Search
General/Chat
Topics · Post Article

To: Windflier
The site's being linked to lots of articles about this virus

That will make it at least a little more likely that the virus writers will write a workaround for this "protection".

11 posted on 10/27/2013 10:58:34 AM PDT by palmer (Obama = Carter + affirmative action)
[ Post Reply | Private Reply | To 8 | View Replies ]


To: palmer

The thing is, it doesn’t matter if you remove the program...once it runs the damage is done.

And in fact, if you do want to recover your files, you are going to need the program to do it.

This is nasty.


13 posted on 10/27/2013 11:01:18 AM PDT by dfwgator
[ Post Reply | Private Reply | To 11 | View Replies ]

To: palmer
That will make it at least a little more likely that the virus writers will write a workaround for this "protection".

The FoolishIT protection tool installs a set of commands that disallow any encryption of your files. Not sure what sort of workaround you could come up with the get around that.

It's also possible to do it manually. See here:

Software Restriction Policies (SRPs) allow you to control or prevent the execution of certain programs through the use of Group Policy. You can use SRPs to block executable files from running in the specific user-space areas that Cryptolocker uses to launch itself in the first place. The best place to do this is through Group Policy, although if you're a savvy home user or a smaller business without a domain, you can launch the Local Security Policy tool and do the same thing.

15 posted on 10/27/2013 11:06:32 AM PDT by Windflier (To anger a conservative, tell him a lie. To anger a liberal, tell him the truth.)
[ Post Reply | Private Reply | To 11 | View Replies ]

Free Republic
Browse · Search
General/Chat
Topics · Post Article


FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson