File-trashing Cryptolocker PC malware

kaiowas said:
Any decent AV should be catching this on the original inbound email long before it's had a chance to encrypt anything
Click to expand...

Well yeah but that's not been the case on many occasions. My point was that if the AV updates and then decides to remove CryptoLocker after letting it do its thing you'd have been better off without AV in the first place.
 
My parents got hit with this last month.

It encrypted about 1/4 of their files and luckily didn't get the backups on the external drive (although this hadn't been updated for a few months).
 
Decent AV won't always pick it up at all, theres so many attack vectors out there now days and malware like this can easily make big cash as proven by some of the responses in this thread so it's worth developing 0-day vectors to infect new PC's.

Weather it's drive by downloads or stagers through other malware.
 
I was at a client's today. About 20 toolbars in IE and 1732 infected items found with a quick scan of malwarebytes. No signs of this big daddy though, surprisingly.

"**** cleaning this mess!" I thought. Told him to back up his **** in his own time and send it over once he's done for a complete format.
 
Last edited:
Like Nate says, how does using a virtual machine help?
Presumably running on a Windows host, therefore the virus can potentially infect the host surely?

I am also interested how it can spread to machines across networks. I know it can access any files the infected machine have access to across a network, but how does it hit other machines? Would it only work if there are shares the infected machine had access to?

Seriously considering with so many threats appearing to keep one machine completely disconnected most of the time for my main uses and just keep an older machine for anything internet based.
 
asim18 said:
I was at a client's today. About 20 toolbars in IE and 1732 infected items found with a quick scan of malwarebytes. No signs of this big daddy though, surprisingly.

"**** cleaning this mess!" I thought. Told him to back up his **** in his own time and send it over once he's done for a complete format.
Click to expand...

So what's he paying you for then?
 
robz21 said:
If you have Dropbox installed, would this be able to access the files in that folder? Or sky drive for that matter...?
Click to expand...

of course it would. i mean why wouldn't it? it is just part of the local file system.

i know you can restore previous versions of files on dropbox. i've used it loads when i've done bad edits on stuff i've been working on. but that's one file at a time.
 
OK, this is an interesting one indeed - and thanks OP for the warning.

As this appears to lead to the conclusion that cloud backup is safest, I suspect that these service providers are licking their lips with all the new business they will get.
 
You must log in or register to reply here.
Back
Top Bottom