Results 1 to 5 of 5

Thread: cryptolocker

  1. #1
    Senior Member
    Philquad's Avatar
    Join Date
    Jan 2008
    Location
    nelson bay
    Age
    55
    Posts
    3,872
    Thanks
    192
    Thanked 1,305 Times in 783 Posts
    Rep Power
    666
    Reputation
    16938

    Default cryptolocker

    anyone seen this of late



    my mate hit me with it to fix
    not very nice, turned 100's of his files into a extension .cryptolocker
    security experts have a website to upload your files 1 at a time to be decrypted as a fix
    or pay the ransom price
    luckily i was able to kill the process, good old malwarebytes fixed the rest
    but the files were gone, mainly jpg or zip files
    the website to decrypt files didnt work once for me

    https://www.facebook.com/philquad68



Look Here ->
  • #2
    LSemmens
    lsemmens's Avatar
    Join Date
    Dec 2011
    Location
    Rural South OZ
    Posts
    10,616
    Thanks
    11,900
    Thanked 7,077 Times in 3,348 Posts
    Rep Power
    3162
    Reputation
    132912

    Default

    From what I know of it, the best insurance agains this nasty is a good, secure, backup and be prepared to lose a few files, even still. Unless, of course you do wish to pay the ransom. It's a particular nasty that I have yet to encounter, and I hope I never have to!

  • #3
    Banned

    Join Date
    Feb 2012
    Posts
    2,361
    Thanks
    166
    Thanked 1,206 Times in 607 Posts
    Rep Power
    0
    Reputation
    16631

    Default

    CryptoLocker worm poses as a crack for Photoshop and Microsoft Office. Hence never install pirated software.

  • The Following 3 Users Say Thank You to jwoegerbauer For This Useful Post:

    lsemmens (29-11-14),Tiny (29-11-14),tristen (29-11-14)

  • #4
    Senior Member

    Join Date
    Dec 2011
    Location
    Tasmania
    Posts
    871
    Thanks
    1,491
    Thanked 961 Times in 418 Posts
    Rep Power
    548
    Reputation
    18421

    Default

    The version I've seen does not add a .cryptolocker extension, but seems to deliberately make it difficult to spot the encrypted files. It even preserves the original created / modified timestamps. Makes it a bastard job to work out which files to restore when multiple drop kick users have chosen to run email attachments from unknown sources - something they have been repeatedly told not to do... and have left cryptolocker running all weekend against a large network file share with over 1 million files.

  • The Following 3 Users Say Thank You to shred For This Useful Post:

    lsemmens (29-11-14),Tiny (29-11-14),tristen (29-11-14)

  • #5
    Senior Member
    Philquad's Avatar
    Join Date
    Jan 2008
    Location
    nelson bay
    Age
    55
    Posts
    3,872
    Thanks
    192
    Thanked 1,305 Times in 783 Posts
    Rep Power
    666
    Reputation
    16938

    Default

    yes sorry, the extension was .encrypted not crypolocker ie: mypenis.jpg.encrypted
    he got it through a email, not a crack
    mainly picture files, not much of anything else
    https://www.facebook.com/philquad68

  • Bookmarks

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •