Data Recovery - Any Questions?

[kracked dude]

http://www.thelakewoodscoop.com/news/2013/10/lakewood-resident-hit-with-new-computer-malware-which-demands-ransom-money.html
Was gonna ask the OP for his opinion on this, but then I noticed one of the comments

[notanonymous]

http://www.thelakewoodscoop.com/news/2013/10/lakewood-resident-hit-with-new-computer-malware-which-demands-ransom-money.html
Was gonna ask the OP for his opinion on this, but then I noticed one of the comments

As old as the internet.

[DH Data Recovery]

What's as old as the internet?

[notanonymous]

What's as old as the internet?

Malware.  The article (really, every article, every time a different flavor of malware comes out) was describing this "new" method of installing software on people's computers and threatening to delete their files without paying a "ransom".

[DH Data Recovery]

You obviously aren't familiar with this - or didnt completely read through this article. This isn't your typical fake FBI virus that can be removed easily with the right tools, this is an actual 256 bit encryption on your data that cannot be removed without the key! This is serious stuff!

[DH Data Recovery]

Oh and for the record they "actually" do "delete" all your data if you dont pay or respond within the alloted time

[notanonymous]

You obviously aren't familiar with this - or didnt completely read through this article. This isn't your typical fake FBI virus that can be removed easily with the right tools, this is an actual 256 bit encryption on your data that cannot be removed without the key! This is serious stuff!

I stand corrected (based on your research).  I've been out of the business for over 5 years, but I have literally removed thousands and thousands of viruses, and recovered data from hundreds of hard drive.  I've never met a virus I could not remove (or in the case that the OS was too corrupted,  at least recover the data), but I suppose technology has advanced.

[churnbabychurn]

Quick question: If i download and use teamviewer or gotomypc is there an increased security threat?

[DanH]

Quick question: If i download and use teamviewer or gotomypc is there an increased security threat?

Yes, but an insignificant one.

[DH Data Recovery]

I stand corrected (based on your research).  I've been out of the business for over 5 years, but I have literally removed thousands and thousands of viruses, and recovered data from hundreds of hard drive.  I've never met a virus I could not remove (or in the case that the OS was too corrupted,  at least recover the data), but I suppose technology has advanced.

Well here you go - here's some research for you to make your own conclusion. I have actually worked on some earlier versions of this virus a few years back already but back then they mostly targeted servers.

There's only one thing you can do - if you have shadow copy enable you can restore previous versions of the file.

http://nakedsecurity.sophos.com/2013/10/12/destructive-malware-cryptolocker-on-the-loose/

[yuneeq]

Quick question: If i download and use teamviewer or gotomypc is there an increased security threat?

Just stay away from ammy whatever you do

[DanH]

Well here you go - here's some research for you to make your own conclusion. I have actually worked on some earlier versions of this virus a few years back already but back then they mostly targeted servers.

There's only one thing you can do - if you have shadow copy enable you can restore previous versions of the file.

http://nakedsecurity.sophos.com/2013/10/12/destructive-malware-cryptolocker-on-the-loose/

Also see this:
http://www.bleepingcomputer.com/virus-removal/cryptolocker-ransomware-information
and
http://www.bleepingcomputer.com/forums/t/511780/dns-sinkhole-campaign-underway-for-cryptolocker/

[churnbabychurn]

Wrote some phone numbers and passwords on a notepad (windows 7) and by mistake closed it without saving> any way to recover?
 

[elikay]

Wrote some phone numbers and passwords on a notepad (windows 7) and by mistake closed it without saving> any way to recover?
 

Run malwarebytes, hopefully some key-logger saved them 

[sawlw]

from an email i received

Subject: CryptoLocker virus alert.

Hi.

Do not reply to this email. I will not read responses.
Send a new message instead - if you have any questions.

I typically refrain from sending out alerts of this sort.
The damage this malware causes is (in my opinion) worth making an exception for.

(Applies to Windows computers only. Macs are exempt - for now.)


http://www.surfright.nl/en/cryptoguard
Watch the video at the link above or seach for cryptolocker on youtube.

Read
http://blog.malwarebytes.org/intelligence/2013/10/cryptolocker-ransomware-what-you-need-to-know/

I suggest that you download and install this blocker ASAP.
http://dl.surfright.nl/hmpalert25.exe



This will download a file named hmpalert25.exe.
Open (run) the exe file...
Close and reopen your browser (IE, Chrome...)
You will need admin rights to install the blocker.
Each time you open a browser or tab you should see a message indicating that the blocker is active. (May be annoying, but...)

If your computer is infected with this malware and encrypts your files, there is no way for you to recover them unless you have a backup which is not accessible to the computer at time of infection or pay the ransom.
This malware encrypts files on USB and network drives.
Removing the malware does not decrypt the files.
The loss of several hundred dollars may not seem that bad. Problem is, if you wait beyond their deadline for paying, the key is deleted. There would be no way to recover your data - unless you have backups (not copies on your network...).
(Think tape drives or online backup.)


This email is being sent to dozens of people.
I am unable to log in and install the blocker for you at this time.
Please do NOT call me regarding this issue at this time.
Send a new email instead. I will respond as soon as I can.



If you forward this email, please remove my email address.
(I ask that you forward from a desktop computer so this can be done easily.)
Please forward to your employees / colleagues....

cf

thoughts?

[DanH]

Not sure what thoughts you are expecting?
It's useless if you have an up to date (good) antivirus.

[DH Data Recovery]

Whats useless?

[DanH]

Whats useless?

Getting their "special" anti-Cyrypto-malware program.

[DH Data Recovery]

Even good up to date anti-virus doesn't stop this attack

[sawlw]

Even good up to date anti-virus doesn't stop this attack

are you advising to install, is the question