Overclock.net › Forums › Industry News › Software News › [AR] You’re Infected—If You Want To See Your Data Again, Pay Us $300 in Bitcoins
New Posts  All Forums:Forum Nav:

[AR] You’re Infected—If You Want To See Your Data Again, Pay Us $300 in Bitcoins - Page 2  

post #11 of 321
Quote:
Originally Posted by serothis View Post

Wow. this is pretty sleezy. although if there's a payment route then finding those responsible should be possible.

eitherway, this is yet another good reason why you should always back up your data.

So you think it wont make your backups unusable as well if it can get to them? Say an attached external hard drive.
W10 Desktop
(17 items)
 
Linux Desktop
(14 items)
 
Win 10 HTPC
(12 items)
 
CPUMotherboardGraphicsGraphics
Intel 5820k ASRock x99 Extreme 4 GTX-960 GTX-750ti 
GraphicsRAMHard DriveHard Drive
HD 7850 4 x 4G DDR4 128G Corsair SSD WD 1G  
Hard DriveOptical DriveCoolingOS
WD 2G generic CDRW/DVD CM 212 EVO Win 10 
MonitorKeyboardPowerCase
ASUS 1920x1200 IPS Microsoft Be Quiet 1000 Antec 305 
Mouse
Reaper 
CPUMotherboardGraphicsRAM
AMD FX-6300 ASUS M5A97 R2.0 GTX-760 Samsung 2 x 4G Wonder Ram 
Hard DriveHard DriveOptical DriveCooling
128G Corsair SSD WD 500G Blue generic CDRW/DVD Corsair H60 
OSMonitorKeyboardPower
Linux Mint 17.2 ASUS 1920x1200 IPS Microsoft XFX 650 
CaseMouse
NZXT 210 Reaper 
CPUMotherboardGraphicsRAM
AMD Phenom II B93 Gigabyte  EVGA GT 740 FTW Misc DD2-800 2x2G and 2x1G 
Hard DriveOptical DriveOSMonitor
Seagate  generic  Win 10 Tech Preview 64 bit HDTV 
KeyboardPowerCaseMouse
HP Corsair cx430 Aptevia HTPC IBM 
  hide details  
W10 Desktop
(17 items)
 
Linux Desktop
(14 items)
 
Win 10 HTPC
(12 items)
 
CPUMotherboardGraphicsGraphics
Intel 5820k ASRock x99 Extreme 4 GTX-960 GTX-750ti 
GraphicsRAMHard DriveHard Drive
HD 7850 4 x 4G DDR4 128G Corsair SSD WD 1G  
Hard DriveOptical DriveCoolingOS
WD 2G generic CDRW/DVD CM 212 EVO Win 10 
MonitorKeyboardPowerCase
ASUS 1920x1200 IPS Microsoft Be Quiet 1000 Antec 305 
Mouse
Reaper 
CPUMotherboardGraphicsRAM
AMD FX-6300 ASUS M5A97 R2.0 GTX-760 Samsung 2 x 4G Wonder Ram 
Hard DriveHard DriveOptical DriveCooling
128G Corsair SSD WD 500G Blue generic CDRW/DVD Corsair H60 
OSMonitorKeyboardPower
Linux Mint 17.2 ASUS 1920x1200 IPS Microsoft XFX 650 
CaseMouse
NZXT 210 Reaper 
CPUMotherboardGraphicsRAM
AMD Phenom II B93 Gigabyte  EVGA GT 740 FTW Misc DD2-800 2x2G and 2x1G 
Hard DriveOptical DriveOSMonitor
Seagate  generic  Win 10 Tech Preview 64 bit HDTV 
KeyboardPowerCaseMouse
HP Corsair cx430 Aptevia HTPC IBM 
  hide details  
post #12 of 321
My understanding of it was it will search anything connected for a certain set of file extensions be it .doc .xls .msg etc...
My System
(16 items)
 
  
CPUMotherboardGraphicsGraphics
i7 2500k @ 4.9Ghz Asus p8z68-v/gen3 EVGA 780TI Classified @ 1400Mhz EVGA 780TI Classified @ 1400Mhz 
RAMHard DriveOptical DriveCooling
8GB Gskill RipjawsX DDR3 @ 1866 4x 500GB WD + 128GB Crucial M4 1x DVD-RW Swiftech H320 
OSMonitorKeyboardPower
Win 8.1 64bit Crossover 27Q-P+ +(2)Dell P2211H + (2) 24" 1200... Razer BlackWidow Ultimate Corsair AX1200 
CaseMouseMouse PadAudio
Black NZXT Switch 810 SteelSeries Sensei  Ripper XXL FIIO E5 + Vmoda M100's with BLU Yeti on ISO Mount 
  hide details  
My System
(16 items)
 
  
CPUMotherboardGraphicsGraphics
i7 2500k @ 4.9Ghz Asus p8z68-v/gen3 EVGA 780TI Classified @ 1400Mhz EVGA 780TI Classified @ 1400Mhz 
RAMHard DriveOptical DriveCooling
8GB Gskill RipjawsX DDR3 @ 1866 4x 500GB WD + 128GB Crucial M4 1x DVD-RW Swiftech H320 
OSMonitorKeyboardPower
Win 8.1 64bit Crossover 27Q-P+ +(2)Dell P2211H + (2) 24" 1200... Razer BlackWidow Ultimate Corsair AX1200 
CaseMouseMouse PadAudio
Black NZXT Switch 810 SteelSeries Sensei  Ripper XXL FIIO E5 + Vmoda M100's with BLU Yeti on ISO Mount 
  hide details  
post #13 of 321
Quote:
Originally Posted by Murlocke View Post

So the solution is don't store things in your documents folders? Doesn't seem like this targets networked servers, NAS bays, or secondary drives which is what most people around here are using.

I've never understood why people use the my documents folder. I've always found it completely useless...

I have my documents folder redirected to shared network storage located on my server and it has several hundred MB worth of documents... How is the folder useless? Are you one of those people that has a complete disaster zone of music, picture, document, video, 'insert other file types here' all in one folder that is near impossible to navigate?
Chibi
(12 items)
 
Arcturus
(8 items)
 
 
CPUMotherboardGraphicsGraphics
i7-3770s Gigabyte G1. Sniper M3 AMD 7850 AMD 7850 
RAMHard DriveOptical DriveOptical Drive
G.Skill Sniper Series low voltage OCZ Vertex 4 Max IOPS LG DVD Burner dual-layer LG Bluray Burner dual-layer 
CoolingOSPowerCase
Custom liquid Windows 7 Ultimate 64 bit Corsair AX650 Fractal Design Arc Mini 
CPUCPUMotherboardRAM
AMD Opteron 4386 AMD Opteron 4386 SUPERMICRO MBD-H8DCL-6F-O Crucial 8GB 240-Pin DDR3 1600 SDRAM ECC Registe... 
Hard DriveOSCaseOther
Western Digital RE WD1001FYYG 1TB 7200RPM 32MB ... Windows Server 2008 R2 SUPERMICRO CSE-825TQ-R700LPB Black Adaptec RAID 2274200-R 7805 
  hide details  
Chibi
(12 items)
 
Arcturus
(8 items)
 
 
CPUMotherboardGraphicsGraphics
i7-3770s Gigabyte G1. Sniper M3 AMD 7850 AMD 7850 
RAMHard DriveOptical DriveOptical Drive
G.Skill Sniper Series low voltage OCZ Vertex 4 Max IOPS LG DVD Burner dual-layer LG Bluray Burner dual-layer 
CoolingOSPowerCase
Custom liquid Windows 7 Ultimate 64 bit Corsair AX650 Fractal Design Arc Mini 
CPUCPUMotherboardRAM
AMD Opteron 4386 AMD Opteron 4386 SUPERMICRO MBD-H8DCL-6F-O Crucial 8GB 240-Pin DDR3 1600 SDRAM ECC Registe... 
Hard DriveOSCaseOther
Western Digital RE WD1001FYYG 1TB 7200RPM 32MB ... Windows Server 2008 R2 SUPERMICRO CSE-825TQ-R700LPB Black Adaptec RAID 2274200-R 7805 
  hide details  
post #14 of 321
Those crafty bastards lol. I can't wait to run into this one, I wanna play with it and see what it does
post #15 of 321
The messed up part is it might as well make an entry in add/remove programs it was so easy to remove manually, but after you remove it the "local key" that your data is encrypted with is gone along with any chance of paying and getting the "private key" to restore your data.
My System
(16 items)
 
  
CPUMotherboardGraphicsGraphics
i7 2500k @ 4.9Ghz Asus p8z68-v/gen3 EVGA 780TI Classified @ 1400Mhz EVGA 780TI Classified @ 1400Mhz 
RAMHard DriveOptical DriveCooling
8GB Gskill RipjawsX DDR3 @ 1866 4x 500GB WD + 128GB Crucial M4 1x DVD-RW Swiftech H320 
OSMonitorKeyboardPower
Win 8.1 64bit Crossover 27Q-P+ +(2)Dell P2211H + (2) 24" 1200... Razer BlackWidow Ultimate Corsair AX1200 
CaseMouseMouse PadAudio
Black NZXT Switch 810 SteelSeries Sensei  Ripper XXL FIIO E5 + Vmoda M100's with BLU Yeti on ISO Mount 
  hide details  
My System
(16 items)
 
  
CPUMotherboardGraphicsGraphics
i7 2500k @ 4.9Ghz Asus p8z68-v/gen3 EVGA 780TI Classified @ 1400Mhz EVGA 780TI Classified @ 1400Mhz 
RAMHard DriveOptical DriveCooling
8GB Gskill RipjawsX DDR3 @ 1866 4x 500GB WD + 128GB Crucial M4 1x DVD-RW Swiftech H320 
OSMonitorKeyboardPower
Win 8.1 64bit Crossover 27Q-P+ +(2)Dell P2211H + (2) 24" 1200... Razer BlackWidow Ultimate Corsair AX1200 
CaseMouseMouse PadAudio
Black NZXT Switch 810 SteelSeries Sensei  Ripper XXL FIIO E5 + Vmoda M100's with BLU Yeti on ISO Mount 
  hide details  
post #16 of 321
Thread Starter 
Quote:
Originally Posted by bavarianblessed View Post

Those crafty bastards lol. I can't wait to run into this one, I wanna play with it and see what it does

I can send you a copy of the sample virus if you want, I'm sitting on 6 links right now.

Each one is a different variant.
post #17 of 321
We can only hope they locate and take down the servers quickly, depriving the trojan of key generation should at least in the short term stop data loss.
It was only a matter of time before things started getting nasty on the malware front, the whole "you have been looking at naughty websites and the police want you to pay £100 to get back on your pc" scam is not working.

and Murlocke it does seem that this malware searches network shares and the like, I don't think it's isolated to directory , its more filetypes.
    
CPUMotherboardGraphicsRAM
5820k MSI X99S SLI PLUS Gigabyte GTX 1060 Mini 6GB OC 16GB GSKILL 2400 Ripjaw 
RAMHard DriveHard DriveHard Drive
16GB Avexir Raiden Rog Certified 2600 DDR4 Samsung 840 EVO 750 Seagate 1TB Seagate 1TB 
CoolingOSMonitorKeyboard
Custome water loop, EK Supremecy MX CPU Block,... Windows 10 Pro 64Bit Benq XL2430T Keycool 87 II 
PowerCaseMouseMouse Pad
Seasonic Snow Silent 750 Platinum Cooltek W2 upgraded to tempered glass window pa... Func MS-2 MSI Thunderstorm Aluminium Mousepad 
Audio
Steelseries Siberia Elite 
  hide details  
    
CPUMotherboardGraphicsRAM
5820k MSI X99S SLI PLUS Gigabyte GTX 1060 Mini 6GB OC 16GB GSKILL 2400 Ripjaw 
RAMHard DriveHard DriveHard Drive
16GB Avexir Raiden Rog Certified 2600 DDR4 Samsung 840 EVO 750 Seagate 1TB Seagate 1TB 
CoolingOSMonitorKeyboard
Custome water loop, EK Supremecy MX CPU Block,... Windows 10 Pro 64Bit Benq XL2430T Keycool 87 II 
PowerCaseMouseMouse Pad
Seasonic Snow Silent 750 Platinum Cooltek W2 upgraded to tempered glass window pa... Func MS-2 MSI Thunderstorm Aluminium Mousepad 
Audio
Steelseries Siberia Elite 
  hide details  
post #18 of 321
Quote:
Originally Posted by frickfrock999 View Post

No, it doesn't just infect My Documents. It can jump across network drives and encrypt anything.
Plus, infection isn't dependent on being a local admin.

By the time you see that pop up, it's already encrypted everything.

This thing is really nasty then, I've got people on this network that are clueless when it comes to avoiding viruses.
Quote:
Originally Posted by DEW21689 View Post

I have my documents folder redirected to shared network storage located on my server and it has several hundred MB worth of documents... How is the folder useless? Are you one of those people that has a complete disaster zone of music, picture, document, video, 'insert other file types here' all in one folder that is near impossible to navigate?

No.. I have networked servers, and just use mapped drives to them. I've never understood the my document folder, even before my servers I would just use a secondary hard drive, or simple folders on the desktop "Music" "Movies" etc. It's less clicks to access the files, and you can organize them how you want.



This looks way nicer than My documents (at least in my opinion) and can be organized exactly how I want...
Edited by Murlocke - 10/18/13 at 8:12am
The Leviathan
(20 items)
 
  
CPUMotherboardGraphicsRAM
Intel i7 6700k @ 4.7GHz MSI Z170A Gaming M7 12GB NVIDIA Titan X (Pascal) 32GB G.Skill Ripjaws V (DDR4 3200) 
Hard DriveHard DriveCoolingCooling
2x 1TB Samsung 960 PRO 193TB unRAID Server 3x 140mm Noctua NF-A14 Noctua NH-D15 
OSMonitorKeyboardPower
Windows 10 Pro x64 65" LG 65E6P (4K OLED) Ducky DK9008 Shine 3  Corsair AX860 
CaseMouseAudioAudio
Corsair Obsidian 750D Logitech G502 Proteus Sprectrum Denon X7200WA (Receiver) 2x Klipsch RF-7 (Front Speakers) 
AudioAudioAudioAudio
4x Klipsch RS-62 (Surround Speakers) Klipsch RC-64 (Center Speaker) 4x Klipsch CDT-5800-C II (Atmos Speakers) 2x SVS PB16-Ultra (Subwoofers) 
  hide details  
The Leviathan
(20 items)
 
  
CPUMotherboardGraphicsRAM
Intel i7 6700k @ 4.7GHz MSI Z170A Gaming M7 12GB NVIDIA Titan X (Pascal) 32GB G.Skill Ripjaws V (DDR4 3200) 
Hard DriveHard DriveCoolingCooling
2x 1TB Samsung 960 PRO 193TB unRAID Server 3x 140mm Noctua NF-A14 Noctua NH-D15 
OSMonitorKeyboardPower
Windows 10 Pro x64 65" LG 65E6P (4K OLED) Ducky DK9008 Shine 3  Corsair AX860 
CaseMouseAudioAudio
Corsair Obsidian 750D Logitech G502 Proteus Sprectrum Denon X7200WA (Receiver) 2x Klipsch RF-7 (Front Speakers) 
AudioAudioAudioAudio
4x Klipsch RS-62 (Surround Speakers) Klipsch RC-64 (Center Speaker) 4x Klipsch CDT-5800-C II (Atmos Speakers) 2x SVS PB16-Ultra (Subwoofers) 
  hide details  
post #19 of 321
Quote:
Originally Posted by Murlocke View Post

No.. I have networked servers, and just use mapped drives to them. I've never understood the my document folder, even before my servers I would just use a secondary hard drive, or simple folders on the desktop "Music" "Movies" etc. It's less clicks to access the files, and you can organize them how you want.



This looks way nicer than My documents (at least in my opinion) and can be organized exactly how I want...

LOL 54TB+ our entire local backup location is 42 TB. SO MUCH SPACE:p
My System
(16 items)
 
  
CPUMotherboardGraphicsGraphics
i7 2500k @ 4.9Ghz Asus p8z68-v/gen3 EVGA 780TI Classified @ 1400Mhz EVGA 780TI Classified @ 1400Mhz 
RAMHard DriveOptical DriveCooling
8GB Gskill RipjawsX DDR3 @ 1866 4x 500GB WD + 128GB Crucial M4 1x DVD-RW Swiftech H320 
OSMonitorKeyboardPower
Win 8.1 64bit Crossover 27Q-P+ +(2)Dell P2211H + (2) 24" 1200... Razer BlackWidow Ultimate Corsair AX1200 
CaseMouseMouse PadAudio
Black NZXT Switch 810 SteelSeries Sensei  Ripper XXL FIIO E5 + Vmoda M100's with BLU Yeti on ISO Mount 
  hide details  
My System
(16 items)
 
  
CPUMotherboardGraphicsGraphics
i7 2500k @ 4.9Ghz Asus p8z68-v/gen3 EVGA 780TI Classified @ 1400Mhz EVGA 780TI Classified @ 1400Mhz 
RAMHard DriveOptical DriveCooling
8GB Gskill RipjawsX DDR3 @ 1866 4x 500GB WD + 128GB Crucial M4 1x DVD-RW Swiftech H320 
OSMonitorKeyboardPower
Win 8.1 64bit Crossover 27Q-P+ +(2)Dell P2211H + (2) 24" 1200... Razer BlackWidow Ultimate Corsair AX1200 
CaseMouseMouse PadAudio
Black NZXT Switch 810 SteelSeries Sensei  Ripper XXL FIIO E5 + Vmoda M100's with BLU Yeti on ISO Mount 
  hide details  
post #20 of 321
Wait I’m not familiar with Bitcoin to USD conversion rates so I checked Google which told me 300 Bitcoun is around 50,000 USD... Doesn’t that seem like they are shooting a little high?

Why not go down to like 2-3 Bitcoin or $300-$500, something real people could afford. I think they would make more money this way. Just sayin…
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Software News
This thread is locked  
Overclock.net › Forums › Industry News › Software News › [AR] You’re Infected—If You Want To See Your Data Again, Pay Us $300 in Bitcoins