Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

Ransomeware attack, need advice
self | 07/16/15 | fwdude

Posted on 07/19/2015 6:34:05 AM PDT by fwdude

I have recently had the unpleasant experience of having one of the new variants of the cryptolocker malware infect our computer servers at work. In case someone doesn't know, its a computer worm that encrypts all the standard-format files on a system so that the use can't open the file without a "key," supplied by the hacker for a ransom.

My question, which I have researched extensively over over the internet, is whether it is advisable consider paying the ransom, if there is enough "honor among thieves" to trust that the files will be unlock if I pay, and if there might remains some residual malware that might reinfect our computers.

And, no, there are no backup files that were untouched, the backups were infected as well.

Some of the files are critical, or at least would take an enormous amount of work to recreate or recover otherwise. Do you consider the risk worth the reward?


TOPICS: Computers/Internet
KEYWORDS: computers; computing; cryptolocker; internet; malware; ransomware
Navigation: use the links below to view more comments.
first previous 1-2021-4041-6061-8081-85 next last
To: Yosemitest
You DO KNOW it’s 2015, don’t you ?

Yup.

And I know nobody uses Apple enterprise servers, because they don't make them.

61 posted on 07/19/2015 4:31:06 PM PDT by tacticalogic
[ Post Reply | Private Reply | To 60 | View Replies]

To: tacticalogic

62 posted on 07/19/2015 4:45:42 PM PDT by Yosemitest (It's Simple ! Fight, ... or Die !)
[ Post Reply | Private Reply | To 61 | View Replies]

To: Yosemitest
That's a joke, right?

A single, dual-core proc, 16GB memory max, one GB Ethernet port, and no slots for fiber channel adapters, and no redundant power supplies.

Nobody is going to build a data center out of those.

63 posted on 07/19/2015 4:58:47 PM PDT by tacticalogic
[ Post Reply | Private Reply | To 62 | View Replies]

To: tacticalogic
You're the joke.
Small components, easy to replace, and easy to put together in MASSIVE NUMBERS !
You really need to get UP TO DATE, and GET AN EDUCATION.

But you'd make a great USED CAR SALESMAN !
64 posted on 07/19/2015 6:03:03 PM PDT by Yosemitest (It's Simple ! Fight, ... or Die !)
[ Post Reply | Private Reply | To 63 | View Replies]

To: Yosemitest
Small components, easy to replace, and easy to put together in MASSIVE NUMBERS !

Run the numbers on how much it costs to pay for them in MASSIVE NUMBERS vs buying machines that were purpose-built as enterprise servers and you'll understand why nobody is doing it.

Or maybe not. After all, it's just other people's money.

65 posted on 07/19/2015 6:07:55 PM PDT by tacticalogic
[ Post Reply | Private Reply | To 64 | View Replies]

To: tacticalogic
When you're the CEO, every penny counts.
Continuing to throw away money on the TROUBLE RIDDEN WINDOWS Operating System just doesn't make good CENTS ! (Pun intended ! )
66 posted on 07/19/2015 6:12:19 PM PDT by Yosemitest (It's Simple ! Fight, ... or Die !)
[ Post Reply | Private Reply | To 65 | View Replies]

To: Yosemitest
When you're the CEO, every penny counts. Continuing to throw away money on the TROUBLE RIDDEN WINDOWS Operating System just doesn't make good CENTS ! (Pun intended ! )

Can you show me an enterprise class data center that's running on racks of Mac Mini's?

If it's such a good deal I'm sure they've all figured it out by now.

67 posted on 07/19/2015 6:15:27 PM PDT by tacticalogic
[ Post Reply | Private Reply | To 66 | View Replies]

To: texas booster
> Any experience with a Cryptolocker?

Fortunately, no personal experience. But I do daily backups that can restore my system from scratch (full image, plus incrementals) and if Crypto hits or the hard drive quits, I can just wipe the drive and reload from backups. So I don't worry about those kinds of attacks or failures.

Acronis True Image. It's less than $50 and I can't say enough good things about it. No, I'm not associated with the company in any way, I'm just a satisfied customer.

I realize that information is of limited value if it's already too late. But it's good for the next time.

68 posted on 07/19/2015 7:39:50 PM PDT by dayglored (Meditate for twenty minutes every day, unless you are too busy, in which case meditate for an hour.)
[ Post Reply | Private Reply | To 29 | View Replies]

To: dayglored; fwdude
I think that fwdude is learning the lesson that most small businesses has learn:

Big or small, your company has more value in its data and email than the value of anything else at the company. It needs to be treated to whatever expense it takes to manage it and protect it.

I hope that fwdude hasn't gotten bored with another flamewar that this thread has turned into.

BTW, I really like your tagline. I may borrow it for my own use before our family disappears on a vacation next month.

69 posted on 07/19/2015 8:18:29 PM PDT by texas booster (Join FreeRepublic's Folding@Home team (Team # 36120) Cure Alzheimer's!)
[ Post Reply | Private Reply | To 68 | View Replies]

To: tacticalogic
What am I, your research dummy?
I'm just an enlisted retired military man, trying to make ends meet, and help my aging parents.

Do you think Apple/Mac us NOT s MAJOR Enterprise without its own data center?
Do you think Apple/Mac Corp is running WINDOWS ?
What about all those computer graphics corporations in California in the movie making business?
Do you think they're running WINDOWS for all those amazing C.G.I. scenes ?
Then what about all those computer hackers in China, North Korea, Russia, and other countries that are stealing American Technology and personal data?
Do you thing they're creating all those "Black Hat" Programs on WINDOWS ?

WAKE UP !
You want security?
You get what you PAY FOR !
70 posted on 07/19/2015 8:21:29 PM PDT by Yosemitest (It's Simple ! Fight, ... or Die !)
[ Post Reply | Private Reply | To 67 | View Replies]

To: Yosemitest
What am I, your research dummy?

No, right now you're a bucket of hubris.

71 posted on 07/19/2015 8:24:07 PM PDT by tacticalogic
[ Post Reply | Private Reply | To 70 | View Replies]

To: tacticalogic

You’re the one asking stupid questions.


72 posted on 07/19/2015 8:28:47 PM PDT by Yosemitest (It's Simple ! Fight, ... or Die !)
[ Post Reply | Private Reply | To 71 | View Replies]

To: tacticalogic; Yosemitest; fwdude
Actually, using the Mac mini as a cheap server is a great idea for small business.

Need more power? Then buy a Mac Pro and have more power in a small container than I ever has when I used to build 400 seat call centers using Mac Server before 2000. (No, I wasn't the Mac Server guru, so I accept criticism that I know nothing).

Was Mac software perfect? Nope. One of our team members had to rewrite the Apple UDP stacks, and push Apple to admit he was correct.

Still, one or two Mac Minis would easily power fwdude’s server requirements. Storage can be added, the Mac software seems easier than comparable Linux server software. And it costs $20.00!

Will the software ever tempt BoA or Facebook to radically change their server and storage strategy? Never, it's the wrong solution for them.

For the millions of small businesses that pay a small fortune to keep Server 20xx up to date and safe across a network, it looks like a great solution.

73 posted on 07/19/2015 8:47:27 PM PDT by texas booster (Join FreeRepublic's Folding@Home team (Team # 36120) Cure Alzheimer's!)
[ Post Reply | Private Reply | To 67 | View Replies]

To: texas booster
Thank you.
It's nice to hear from someone that actually knows the differences between several Operating Systems.
Security, from what little I know from a very close friend who worked 6 years USAF Tech Control, and about 25 years Security systems with bank vaults, fire alarm systems, and money drop tubes, as well as hotels security systems, is more about SOFTWARE than it is about HARDWARE.
But occasionally some pieces of hardware and NEWER TECHNOLOGY ... DOES make a difference.
74 posted on 07/19/2015 11:09:08 PM PDT by Yosemitest (It's Simple ! Fight, ... or Die !)
[ Post Reply | Private Reply | To 73 | View Replies]

To: Does so
The first time I received a ransomeware “lock”, I took my laptop to a local repair shop. He fixed it, and added Malwarebytes and “CleanUp”.

What exactly did he "fix" and how? Did he unlock your files? That is the critical thing needing fixing.

75 posted on 07/20/2015 3:47:03 AM PDT by fwdude (The last time the GOP ran an "extremist," Reagan won 44 states.)
[ Post Reply | Private Reply | To 56 | View Replies]

To: texas booster
Actually, using the Mac mini as a cheap server is a great idea for small business.

Would you build an enterprise data center out of them?

76 posted on 07/20/2015 3:53:00 AM PDT by tacticalogic
[ Post Reply | Private Reply | To 73 | View Replies]

To: tacticalogic

Never.

Wrong hammer for the job - we agree on that. But nothing I saw on their online pages expected that the Mac Mini would ever stand up to the ultra high density server and storage solutions that exist now.

I thought the discussion was directed at small business security, not convincing Facebook to buy pallets of Mac Minis to stuff in their new Fort Worth data center.

I will say - with the proper software and ingenuity, a fanless SSD box like the Mac Mini could be ganged together to create such a monstrosity.

After all, even Saddam used PS2 units for missle or nuclear design.


77 posted on 07/20/2015 5:24:52 AM PDT by texas booster (Join FreeRepublic's Folding@Home team (Team # 36120) Cure Alzheimer's!)
[ Post Reply | Private Reply | To 76 | View Replies]

To: fwdude

If I’d known the answer, I would have done it myself!


78 posted on 07/20/2015 5:34:45 AM PDT by Does so (SCOTUS Newbies Will Imperil America...)
[ Post Reply | Private Reply | To 75 | View Replies]

To: texas booster
I thought the discussion was directed at small business security,

At this point we don't know what the scale is, or what the original infection vector was. I do know that "replace it with Apple" is not a viable solution for anything beyond a home or small business environment. They simply do not have anything that will scale beyond that. Ransomware encrypts your data and then you have to pay to get the key to decrypt it. It can do this to any file the user has write access to, so it doesn't need admin rights to do a lot of damage. The target vulnerability is the user, not the OS.

79 posted on 07/20/2015 5:51:36 AM PDT by tacticalogic
[ Post Reply | Private Reply | To 77 | View Replies]

To: Grampa Dave
Because MS is so ‘good’ to its end customers!

No, Microsoft sucks, and I hate them almost as much as I do Google, but do not deceive yourself. Google currently represents a far greater threat than does Microsoft.

Google helped throw the last election to Obama. Google keeps unbelievably detailed data on everyone who gets on the internet. Google is the modern Stasi who are not yet an arm of the government, but given how they support leftwing causes and candidates, might as well be.

Google is a THREAT. We don't need to be helping Google at all. They are f***ing dangerous.

80 posted on 07/20/2015 7:45:09 AM PDT by DiogenesLamp ("of parents owing allegiance to no other sovereignty.")
[ Post Reply | Private Reply | To 53 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-4041-6061-8081-85 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson