Ransomware!?

[deadsolid...shank]

Well this is new one for me. Technology wise, I know virtually zero, just the little bit that I need to take care of my computer needs.

 

This popped up yesterday saying my files are all now encrypted and if I want the key it's $500. After five days it jumps to $1,000.

 

What a mess. Anyone else have this happen?

[Argonne69]

No, but that sucks. I'm religious about staying on top of software and anti-virus updates, disable browser plug-ins, using an ad blocker, and disabling Javascript unless absolutely needed.

I hope you have a backup of your system?

[PZero]

Nothing will happen, it's a scam.

[Arizonalefty59]

Happened to me a couple times on my MacBook. I just restarted it and it was gone.

[deadsolid...shank]

[quote name='PZero' timestamp='1446743641' post='12557016']
Nothing will happen, it's a scam.
[/quote]

I don't know. I can't open any files.

[quote name='Argonne69' timestamp='1446742865' post='12556948']
No, but that sucks. I'm religious about staying on top of software and anti-virus updates, disable browser plug-ins, using an ad blocker, and disabling Javascript unless absolutely needed.

I hope you have a backup of your system?
[/quote]

I actually don't have a lot of files on here that I need. My business database I have backed up, so while I'm going to lose a few things I'm ok on the important one.

[SilverBullets]

[quote name='deadsolid...shank' timestamp='1446738998' post='12556668']
Well this is new one for me. Technology wise, I know virtually zero, just the little bit that I need to take care of my computer needs.

This popped up yesterday saying my files are all now encrypted and if I want the key it's $500. After five days it jumps to $1,000.

What a mess. Anyone else have this happen?
[/quote]

This is actually becoming increasingly popular. I know companies right now are struggling with a group of cyber criminals using a hack called CryptoLock. They essentially do the same thing. Look a vulnerability on the company's network, gain access, encrypt anything they can and hold it ransom. Pay them and they give you the key and you get your data back. Don't pay them and they never unlock it. Companies with backup data simply take production offline, fix the vulnerability and restore it with backup data and really lose nothing. Companies with poor data backup processes and procedures end up paying the ransom. Then nothing is preventing the hackers from just doing it again.

I haven't heard of it done on a personal device yet but it makes sense that they would. Don't pay them. It's a scam or it's a criminal. If you truly can't get any files you may have to wipe your cpu and start over.

[Argonne69]

[quote name='deadsolid...shank' timestamp='1446759897' post='12558220']
[quote name='PZero' timestamp='1446743641' post='12557016']
Nothing will happen, it's a scam.
[/quote]

I don't know. I can't open any files.

[quote name='Argonne69' timestamp='1446742865' post='12556948']
No, but that sucks. I'm religious about staying on top of software and anti-virus updates, disable browser plug-ins, using an ad blocker, and disabling Javascript unless absolutely needed.

I hope you have a backup of your system?
[/quote]

I actually don't have a lot of files on here that I need. My business database I have backed up, so while I'm going to lose a few things I'm ok on the important one.
[/quote]

I assume you started by rebooting the computer to see if the problem is not temporary?

[deadsolid...shank]

[quote name='Argonne69' timestamp='1446760550' post='12558252']
[quote name='deadsolid...shank' timestamp='1446759897' post='12558220']
[quote name='PZero' timestamp='1446743641' post='12557016']
Nothing will happen, it's a scam.
[/quote]

I don't know. I can't open any files.

[quote name='Argonne69' timestamp='1446742865' post='12556948']
No, but that sucks. I'm religious about staying on top of software and anti-virus updates, disable browser plug-ins, using an ad blocker, and disabling Javascript unless absolutely needed.

I hope you have a backup of your system?
[/quote]

I actually don't have a lot of files on here that I need. My business database I have backed up, so while I'm going to lose a few things I'm ok on the important one.
[/quote]

I assume you started by rebooting the computer to see if the problem is not temporary?
[/quote]

Yeah, that was the first thing I did. My wife, who is much more computer savy than I am went in and tried to do some stuff to help but it didn't appear to help at all, the files are just gibberish.

[LouieLouie]

I would try unplugging the internet from the computer, restarting in safe mode and running your antivirus program and your anti-malware program (i.e. malwarebytes). Then run a disk clean up and remove any temporary files and internet files.

That should get rid of any virus or malware installed if they used something like that. Not sure that will work if they actually encrypted everything, you might be SOL.

I just found this too. This might help;
http://www.pcworld.com/article/2084002/how-to-rescue-your-pc-from-ransomware.html

[deadsolid...shank]

[quote name='LouieLouie' timestamp='1446762878' post='12558396']
I would try unplugging the internet from the computer, restarting in safe mode and running your antivirus program and your anti-malware program (i.e. malwarebytes). Then run a disk clean up and remove any temporary files and internet files.

That should get rid of any virus or malware installed if they used something like that. Not sure that will work if they actually encrypted everything, you might be SOL.

I just found this too. This might help;
[url="http://www.pcworld.com/article/2084002/how-to-rescue-your-pc-from-ransomware.html"]http://www.pcworld.c...ransomware.html[/url]
[/quote]

Thanks for the link Louie. I have the last one, the nasty one.

[Argonne69]

You were lucky that the computer didn't have any important, irreplaceable files. Too many folks fail to keep backups, including offsite backups. A buddy has his home burglarized, and they took his computers with 10+ years of family photos and videos. He didn't care about the old computer, but the solo copies of the pics and videos were priceless to him. A fire can do the same thing.

I perform backups of my PC's every night, and make an offsite copy once a month. I have way too much data to upload into the "cloud", so I use an external hard drive for these.

[billyhandsomeface]

My parents had this happen, and all I had to do was put in the reboot disk. If it locks your browser, just try a different one. This was a few years ago when this thing first started happening. Word to the wise: Get an external hard drive. They are cheap and a lifesaver.

[Faelcrom]

Ransomware, Cryptolocker....they are known by quite a few names, and I know them well. I own & operate an IT services firm. Once infected you have 2 options: Pay them or restore from Backups. I strongly suggest you use your backup. The malware is often polymorphic and is very hard to completely clean out from a system. Our SOP once we ID the infected (Patient Zero) system is complete system wipe & restore from backup. I suggest you do the same.
In the longer term you should protect your system properly:[list]
[*]Have an up to date Anti-Virus & Anti-Malware protection on your PC....and YES even if you have a MAC.
[*]Have a proper SPAM filtering service in place for your email. This is probably the most common penetration point.
[*]Perform a FULL system backup of your systems on initial deployment & major changes.
[*]Perform daily data backups, and as a further precaution have an off-site backup of the data. Cloud base services are cheap these days. If you ever have a flood/fire/theft you'll be glad you have it.
[/list]
Those are just a MINIMUM protection. Better safe than sorry.

[Gamble Gamble]

Ok, I'll be the guy who asks...

What kind of crazy "educational videos" were you watching? Did they involve pulling the handle?