Friday, November 22, 2013

teamIt Logic good piece Jon on Virus


 

CryptoLocker Virus
TeamLogic IT - Your Technology Advisor
 
 
How it Infects Your Computer
 
A new, particularly bad computer virus is running rampant through the Internet and has affected several local companies. The "CryptoLocker virus" is an example of ransomware, a class of malware that, once it has infected a computer system, restricts access to that system until the user pays a ransom. CryptoLocker is a particular form of ransomware known as cryptoviral extortion, a scheme in which key files on the system's hard drive are encrypted making them inaccessible to the user unless and until that user pays a ransom to obtain a key for decrypting the files.  
 
Holding Your Files Ransom
 
 
The CryptoLocker worm is generally spread via drive-by downloads or as an attachment to phony emails disguised as legitimate messages from various businesses, such as fake FedEx and UPS tracking notifications. When a user opens such a message, CryptoLocker installs itself on the user's system, scans the hard drive, and encrypts certain file types, such as images, documents and spreadsheets. CryptoLocker then launches a window (like the one shown above) displaying a demand for ransom (to be paid in less-traceable forms such as Bitcoins and Green Dot Moneypaks) and a countdown timer showing the date and time before which the user mu
If the ransom is paid before the deadline, a key is given to decrypt the files. If not, the key is destroyed and the files are effectively lost forever. Even advanced software security companies don't really have ways to restore the encrypted files. Catching the hackers behind CryptoLocker may be the only way to retrieve the files.
The good news is that paying the ransom does actually decrypt the files, and the hackers behind CryptoLocker so far have been honest and not reinfected computers after the ransom is paid.
Security companies are working on a protection, but there isn't one yet. Users should remain vigilant about their security online, double-checking the legitimacy of links received in emails and social media messages.st submit payment in order to obtain the decryption key before it is destroyed. According to various accounts, users whose computers have been infected by CryptoLocker have been able to restore their files by paying the demanded ransom (usually $300 to be paid within 72 hours). Unfortunately, computer security companies haven't yet come up with a solid defense against the CryptoLocker malware. 
 
Local Businesses Have Been Infected
 
Here locally, we had our second system come in this week infected with CryptoLocker.  Both of these computers were part of networks where even the files stored on their server were infected and un-retrievable.  Luckily both of the customers had good viable server backups and we were able to restore the files from the day prior.  Unfortunately for the user, they lost any files saved to their local computer as their individual workstation was not backed up.  Both customers have high-level anti-virus software on their systems.  We ask that you be extra vigilant when opening e-mail from unknown sources.  Make sure everyone in your business knows and understands about CryptoLocker. US police force pay bitcoin ransom
 
 
TeamLogicIT.com/MountainViewCA
 
 
2483 Old Middlefield Way, Suite 120, Mountain View, CA 94043  | 650-336-7500
 
 

 

TeamLogic IT of Mountain View | 2483 Old Middlefield Way, Suite 120 | Mountain View | CA | 94043

 

1 comment:

  1. quick 6 month loansis an ideal help for the applicant who are dealing with the fiscal crisis before their payday and are unable to get money because of their blemished credit ratings.
    quick loans no credit check
    3 month cash loans no credit check
    Fast Loans over 12 Months

    ReplyDelete