New versions of CRYPTO virus circulating!

CT4ME

CT4ME

Cleared for Takeoff
Joined
Oct 24, 2011
Messages
1,321
Location
Phoenix, AZ
Display Name
CT4ME
Home Airfield
KDVT
The Crypto Virus is at it again. There have been many versions, but the current one "CryptoWall" seems to be making it through most of the antivirus programs. We have had several clients get the virus, even though their mail was being filtered by Google's Gmail system. Their filter is usually bullet-proof. AppRiver, another huge player in the email filtering business, has warned us that the virus is slipping through their filters.

Beware of email messages that have attachments or links. The messages claim to be faxes or voice mail messages. The links may point to infected files that live on DropBox or other file repositories.

Check your backups, as they will be the only way you can get your files back. And be aware that your backup files, if accessible by the infected computer, will also be encrypted and useless.

CryptoPrevent, from fooli****.com will prevent the virus, as will some other speciality products, and some normal antivirus may prevent the infection.

The **** above is because the company's name contains a bad word. Their name is Foolish IT (as in Information Technology). So the website is Foolish IT.com. Check under "cryptoprevent"
 
Last edited:
CT4ME said:
The **** above is because the company's name contains a bad word. Their name is Foolish IT (as in Information Technology). So the website is Foolish IT.com. Check under "cryptoprevent"
Click to expand...

The great thing about Cryptoprevent is that it alters the windows registry to prevent execution of filenames of the form filename.pdf.exe, filename.doc.exe, etc.

By default Windows hides the file suffix of executable programs this makes it straightforward for an evildoer to entice a user to click on what he or she thinks is a document, but is really an installer for malware.

I have both Macs and PCs, and prefer PCs, but I've never understood why MS hides file extensions.
 
JimNtexas said:
The great thing about Cryptoprevent is that it alters the windows registry to prevent execution of filenames of the form filename.pdf.exe, filename.doc.exe, etc.

By default Windows hides the file suffix of executable programs this makes it straightforward for an evildoer to entice a user to click on what he or she thinks is a document, but is really an installer for malware.

I have both Macs and PCs, and prefer PCs, but I've never understood why MS hides file extensions.
Click to expand...

This brings up another point - if possible/practical, always have file extensions visible!
 
JimNtexas said:
I have both Macs and PCs, and prefer PCs, but I've never understood why MS hides file extensions.
Click to expand...

It's the first thing I turn on when configuring a new PC. I want to SEE the file extension.
 
There's a good reason for having them hidden by default. Once they are exposed, it's the operators duty to enter the extension when they save files. Many users aren't sophisticated enough to do that. It causes a big hassle, like lost files or double-clicking not working, when the files get saved improperly. 'Damned if you do, damned if you don't.
 
Crypto prevent works great! It also by design prevents other Trojans like fake antivirus.
 
CT4ME said:
There's a good reason for having them hidden by default. Once they are exposed, it's the operators duty to enter the extension when they save files. Many users aren't sophisticated enough to do that. It causes a big hassle, like lost files or double-clicking not working, when the files get saved improperly. 'Damned if you do, damned if you don't.
Click to expand...

Funny, I've found that nearly every application I use automatically adds the proper file extension. Can't remember the last time I had to type one on my own :eek:
 
CT4ME said:
There's a good reason for having them hidden by default. Once they are exposed, it's the operators duty to enter the extension when they save files. Many users aren't sophisticated enough to do that. It causes a big hassle, like lost files or double-clicking not working, when the files get saved improperly. 'Damned if you do, damned if you don't.
Click to expand...

Or, the developer can be proactive... When the file selected to save lacks the expected extension, it can be appended to the selection. It's nice if the OS libraries does this for you, but as a developer, it pays to code defensively.
 
One thing I like about Win7 (not sure if it was in Vista, as I went from XP straight to 7) is when you hit F2 or click the file name to rename a file, it selects the file name before the dot so you don't have to worry about accidentally changing the extension. Not like it's really that hard to remember "it was .pdf before, make it .pdf after"... but that does seem to be beyond quite a few users.
 
you mean I:

1. should not open links in files in email I am not expecting?

2. should not open documents sent via email I am not expecting?

3. should not open emails that are obviously spam?

4. should check links in emails to make sure they are opening what the link words say?

Freakin' a. . . . now you are going to tell me that I am not the long lost relative of Barrister Abundeh Johnson . . . oil minister of Botswana . . .
 
You must log in or register to reply here.
Back
Top