Author Topic: Crypto Locker  (Read 6481 times)

0 Members and 1 Guest are viewing this topic.

Offline MrCruza

  • Hard Floor Camper User
  • *****
  • Posts: 1208
  • Thanked: 105 times
  • Gender: Male
Crypto Locker
« on: October 14, 2015, 12:22:01 PM »
Here at work we have had a lot of customers in the last week or so getting hit by Cryptolocker. Seems to be on the increase so a reminder to all.

BACKUP, BACKUP, BACKUP.

Preferably have a complete image backup separate from your PC that can be used to restore. At the very least keep an up to date separate copy of all your documents and photos etc.

Above all, NEVER NEVER NEVER click on a zip attachment on an email, unless you are 100% certain you know where it comes from and that it is legit. If you get one from a known source that you weren't expecting, DO NOT open it. Call them and verify they actually sent it first.

Cheers.

Cheers, John.




'12 Cruiser
2020 NextGen Blackline

time

  • Guest
Re: Crypto Locker
« Reply #1 on: October 14, 2015, 12:31:24 PM »

Offline MrCruza

  • Hard Floor Camper User
  • *****
  • Posts: 1208
  • Thanked: 105 times
  • Gender: Male
Re: Crypto Locker
« Reply #2 on: October 14, 2015, 12:32:46 PM »
Is this still relevant?  http://www.bbc.com/news/technology-28661463


Unfortunately no. The crims have moved on from there..
Cheers, John.




'12 Cruiser
2020 NextGen Blackline

Offline Bird

  • Once Was Lost, now am found
  • Hard Top Camper User
  • ******
  • Posts: I am a geek!!
  • Thanked: 1874 times
  • Gender: Male
  • Life is far too long....
    • My Place.
Re: Crypto Locker
« Reply #3 on: October 14, 2015, 12:47:42 PM »
Quote from: MrBitchi
Above all, NEVER NEVER NEVER click on a zip attachment on an email, unless you are 100% certain you know where it comes from and that it is legit. If you get one from a known source that you weren't expecting, DO NOT open it. Call them and verify they actually sent it first.


If only we hired people that smrt....
-
Click to enlarge

Gone to a new home

Offline noel_w

  • Hard Top Camper User
  • ******
  • Posts: 2484
  • Thanked: 138 times
  • Gender: Male
  • Welcoming Mexicans to SEQ since 2015
Re: Crypto Locker
« Reply #4 on: October 14, 2015, 01:27:28 PM »

If only we hired people that smrt....
Are you referring to yourself there Bird haha


Can only re-enforce MrBitchi's comments. I had an incident a "while" ago with one of the first strains and luckily I had backed it up not long before. It was our General Managers home PC and had some important documentation on it. We were lucky then but please backup, backup backup. And open the backup on a protected clean PC if the worst does happen.
TUG=GU ST 2012 Ute, CT = Modcon Imperial HF
We have to start thinking about what sort of a world we are going to leave for Keith Richards after we are all gone.

Offline Bird

  • Once Was Lost, now am found
  • Hard Top Camper User
  • ******
  • Posts: I am a geek!!
  • Thanked: 1874 times
  • Gender: Male
  • Life is far too long....
    • My Place.
Re: Crypto Locker
« Reply #5 on: October 14, 2015, 01:56:58 PM »
Quote from: noel_w
Are you referring to yourself there Bird haha

nasty nasty man. careful or I'll retract my offer of off site storage for your 500g of tunes...
-
Click to enlarge

Gone to a new home

Online jk

  • Hard Top Camper User
  • ******
  • Posts: 3155
  • Thanked: 79 times
  • Gender: Male
Re: Crypto Locker
« Reply #6 on: October 14, 2015, 03:58:29 PM »
Just received four emails from an old client, each one had an attachment of 31KB so I text him to see if they were from him and got a quick reply saying "NO, DO NOT OPEN"............bullet dodged  ;D , thanks to this thread acting as a reminder to check ALL suspect emails,

Thanks Guys  :cup:
2004 V8 5 speed IFS landcruiser with "ATS"
 
2005 Cape York Explorer Extreme with "ATS"

2012 Crusader X Country
   
McGirr is my Russell Coight and I'd follow him "Almost" anywhere !!!!!!

Offline Symon

  • Big sparks r us
  • Electrimagician
  • Hard Top Camper User
  • *****
  • Posts: 5691
  • Thanked: 173 times
  • Gender: Male
  • www.phased.com.au
    • Web Server in a Box Project
Re: Crypto Locker
« Reply #7 on: October 15, 2015, 05:33:34 AM »
And when you backup to an external HDD, don't leave it connected :)

Also if you backup to a network drive, you aren't safe either.

You are on a Mac, which never has problems like this? Think again.

Do not PM me for technical advice - start a thread.
HDJ79 Ute - 100 Series Sahara - 2002 Kimberley Kamper - No ATS yet - Survivor of 5 McGirr trips-Cape 09,11,12,14 & Gulf 13

Offline hawks667

  • Swag User
  • **
  • Posts: 92
  • Thanked: 21 times
  • Gender: Male
Re: Crypto Locker
« Reply #8 on: October 15, 2015, 07:05:56 AM »
I run Cryptoprevent on all my machines......

Another option is HitmanPro Alert with CryptoGuard...

Ive seen first hand how Crypt0L0cker works, its a nasty one!!
Prado 120 with all the fruit pulling an Aussie Jays Crusher.

Offline Bird

  • Once Was Lost, now am found
  • Hard Top Camper User
  • ******
  • Posts: I am a geek!!
  • Thanked: 1874 times
  • Gender: Male
  • Life is far too long....
    • My Place.
Re: Crypto Locker
« Reply #9 on: October 15, 2015, 07:08:22 AM »
... and if you have backups occasionally check they are still working as a mate found out - their company backups hadn't been working for around 18mths... major poo hit the fan....
-
Click to enlarge

Gone to a new home

Offline MrCruza

  • Hard Floor Camper User
  • *****
  • Posts: 1208
  • Thanked: 105 times
  • Gender: Male
Re: Crypto Locker
« Reply #10 on: October 15, 2015, 05:42:16 PM »
... and if you have backups occasionally check they are still working as a mate found out - their company backups hadn't been working for around 18mths... major poo hit the fan....

x2  A major part of my job is checking cutomers backups every month.
Cheers, John.




'12 Cruiser
2020 NextGen Blackline

Offline oldmate

  • Soft Floor Camper User
  • ****
  • Posts: 496
  • Thanked: 1311 times
Re: Crypto Locker
« Reply #11 on: October 15, 2015, 05:54:58 PM »
... and if you have backups occasionally check they are still working as a mate found out - their company backups hadn't been working for around 18mths... major poo hit the fan....

i can understand that, when i get major back ups, the poo hits the fan.  Ohh wrong way round.


Thanks for the reminder though John
Our Blog. A work in progress
https://www.facebook.com/UltimateAdventuresBlog/

Online Moggy

  • Hard Floor Camper User
  • *****
  • Posts: 1167
  • Thanked: 138 times
  • Gender: Male
Re: Crypto Locker
« Reply #12 on: October 15, 2015, 07:48:34 PM »

Preferably have a complete image backup separate from your PC that can be used to restore.
Cheers.
So whats the best way to do that ??? Is there a preferred special program or is it a windows feature ???

I back up work/business files as well as pics, music, movies etc to a separate hd, but have no idea how to do the complete backup image thing

Also I know nothing about computers, but it surprises me that if someone has the knowledge to do this & after reading other posts there is obviously programs to prevent, then why hasnt someone come up with a way to "reverse engineer" (so to speak) the crypto locker. In other words if someone can lock you out of your machine then why not have a virus that if activated will then infect the crims machine & do exactly the same thing ie; lock them out of their machine ??? But as i said i know nothing of the workings of computer code (except what i saw on Die Hard 4  ;D)
All men dream but not equally. Those who dream by night in the dusty recesses of their minds wake in the day to find that it was vanity; but the dreamers of the day are dangerous men, for they may act their dream with open eyes to make it possible.
T.E. Lawrence

Offline Bird

  • Once Was Lost, now am found
  • Hard Top Camper User
  • ******
  • Posts: I am a geek!!
  • Thanked: 1874 times
  • Gender: Male
  • Life is far too long....
    • My Place.
Re: Crypto Locker
« Reply #13 on: October 15, 2015, 07:58:50 PM »
So whats the best way to do that ??? Is there a preferred special program or is it a windows feature ???
look up disk imaging software

you have stuff like Nortons Ghost, but there are some free ones.
http://www.symantec.com/en/au/ghost-solution-suite/

basically you take a photocopy of your whole drive just as you finish the whole build and all patches run..
Then if it hits the fan, you can just format, and reimage the Hard drive and everything works.. You then copy your data back to the machine.

its a chore but nicer than the options.
-
Click to enlarge

Gone to a new home
The following users thanked this post: Moggy

Offline MrCruza

  • Hard Floor Camper User
  • *****
  • Posts: 1208
  • Thanked: 105 times
  • Gender: Male
Re: Crypto Locker
« Reply #14 on: October 15, 2015, 10:01:08 PM »
So whats the best way to do that ??? Is there a preferred special program or is it a windows feature ???

I back up work/business files as well as pics, music, movies etc to a separate hd, but have no idea how to do the complete backup image thing

Also I know nothing about computers, but it surprises me that if someone has the knowledge to do this & after reading other posts there is obviously programs to prevent, then why hasnt someone come up with a way to "reverse engineer" (so to speak) the crypto locker. In other words if someone can lock you out of your machine then why not have a virus that if activated will then infect the crims machine & do exactly the same thing ie; lock them out of their machine ??? But as i said i know nothing of the workings of computer code (except what i saw on Die Hard 4  ;D)

Look for a program called "Drive Image XML". It's free and will do a complete image to an external drive.

Crypto uses AES 256 encryption, thats an encryption algorithm with a key length of 256 bits. It's considered to be just about the most secure encryption there is, and it would take a supercomputer several years to break the code on one instance. For all practical purposes it's unbreakable.

As for doing the same thing to the crims, well first you have to find them..
Cheers, John.




'12 Cruiser
2020 NextGen Blackline

Online Moggy

  • Hard Floor Camper User
  • *****
  • Posts: 1167
  • Thanked: 138 times
  • Gender: Male
Re: Crypto Locker
« Reply #15 on: October 16, 2015, 08:50:42 AM »
Look for a program called "Drive Image XML". It's free and will do a complete image to an external drive.


Thanks for that.

Just a quick question, I'm assuming the external hd must be the same size (or bigger) than the existing desktop system y/n ???

 :cheers:
All men dream but not equally. Those who dream by night in the dusty recesses of their minds wake in the day to find that it was vanity; but the dreamers of the day are dangerous men, for they may act their dream with open eyes to make it possible.
T.E. Lawrence

Offline Bird

  • Once Was Lost, now am found
  • Hard Top Camper User
  • ******
  • Posts: I am a geek!!
  • Thanked: 1874 times
  • Gender: Male
  • Life is far too long....
    • My Place.
Re: Crypto Locker
« Reply #16 on: October 16, 2015, 08:51:50 AM »
Thanks for that.

Just a quick question, I'm assuming the external hd must be the same size (or bigger) than the existing desktop system y/n ???

 :cheers:
It may give you the option to compress the drive, but drives are worth nothing these days.. www.msy.com.au
-
Click to enlarge

Gone to a new home

Offline MrCruza

  • Hard Floor Camper User
  • *****
  • Posts: 1208
  • Thanked: 105 times
  • Gender: Male
Re: Crypto Locker
« Reply #17 on: October 16, 2015, 11:55:08 AM »
Thanks for that.

Just a quick question, I'm assuming the external hd must be the same size (or bigger) than the existing desktop system y/n ???

 :cheers:

Get a larger drive so you can do more than one image. Do one now, another in say a months time, then in another month delete the first one and do another etc. This of course should be in addition to regular copy type backups of your documents, pictures etc. Personally I keep an additional copy of all my pictures on another separate hard disk stored on a fire proof safe away from the house.

You can get 2TB portables from JB Hi-Fi for about $150
Cheers, John.




'12 Cruiser
2020 NextGen Blackline