Overclock.net › Forums › Industry News › Software News › [TR/NS] World's Worst Ransomware Now Even Worse: Demands Money and Mocks You.
New Posts  All Forums:Forum Nav:

[TR/NS] World's Worst Ransomware Now Even Worse: Demands Money and Mocks You. - Page 3

post #21 of 49
There is a part of me that kind of hopes this can utilize C$, I have admin rights across out network and on every PC at work. On top of that, C$ is still enabled.
Ever Evolving
(18 items)
 
   
CPUMotherboardGraphicsRAM
Phenom II 1090T Black Edition Gigabyte GA-890FXA-UD5 Diamond R9 280X Crucial Ballistix Sport 16GB VLP DDR3 1600 CL9 ... 
Hard DriveHard DriveHard DriveOptical Drive
Vertex 3 120GB SSD  2x WD 1TB Caviar Black SATA3 WD Caviar Black 640GB SATA2 HP DVD-RW 1170i 
CoolingCoolingCoolingOS
Prolimatech Megahalem 2x Delta AFB1212SHE  7x Cooler Master SickleFlow R4 fans Windows 7 Professional 64bit 
MonitorKeyboardPowerCase
2x Samsung SyncMaster E2420 23.6" 1920x1080 Logitech G15 Corsair HX1000W Cooler Master HAF932 (Fan Mod) 
MouseMouse Pad
Logitech G400 Generic 
CPUMotherboardGraphicsRAM
3.0GHz P4 w/HT Asus P5GDC-V deluxe ATI HD 3450 2GB DDR400 
Hard DriveOptical DriveOSMonitor
1x WD 360GB 1x WD 120GB 3xDead LiteOn DVDROM LiteON DVDRW XP SP3 x86 AG Neovo 17" (Sceptre 21" 1080p died) 
PowerCaseMouse Pad
Ultra 550W oldschool MGE case what mouse pad? 
  hide details  
Reply
Ever Evolving
(18 items)
 
   
CPUMotherboardGraphicsRAM
Phenom II 1090T Black Edition Gigabyte GA-890FXA-UD5 Diamond R9 280X Crucial Ballistix Sport 16GB VLP DDR3 1600 CL9 ... 
Hard DriveHard DriveHard DriveOptical Drive
Vertex 3 120GB SSD  2x WD 1TB Caviar Black SATA3 WD Caviar Black 640GB SATA2 HP DVD-RW 1170i 
CoolingCoolingCoolingOS
Prolimatech Megahalem 2x Delta AFB1212SHE  7x Cooler Master SickleFlow R4 fans Windows 7 Professional 64bit 
MonitorKeyboardPowerCase
2x Samsung SyncMaster E2420 23.6" 1920x1080 Logitech G15 Corsair HX1000W Cooler Master HAF932 (Fan Mod) 
MouseMouse Pad
Logitech G400 Generic 
CPUMotherboardGraphicsRAM
3.0GHz P4 w/HT Asus P5GDC-V deluxe ATI HD 3450 2GB DDR400 
Hard DriveOptical DriveOSMonitor
1x WD 360GB 1x WD 120GB 3xDead LiteOn DVDROM LiteON DVDRW XP SP3 x86 AG Neovo 17" (Sceptre 21" 1080p died) 
PowerCaseMouse Pad
Ultra 550W oldschool MGE case what mouse pad? 
  hide details  
Reply
post #22 of 49
Thread Starter 
Actually, he makes a good point.

I'll remove the vaccine link from the OP immediately. As well as any mention of it whatsoever.
post #23 of 49
Quote:
Originally Posted by xRehab View Post

I was wondering this too, and I visit some pretty sketchy places on the internet fairly consistently without even bothering to VM or run any real AV; just ghostery and uBlock with a malware bytes scan every few months. I feel like it has to be the old email phishing technique (at least for the work PCs that everyone seems to have to deal with, internal email ****s everyone) with no intent on actually getting data, just locking it all up.

on a side note, how much havoc does this stuff cause on systems with multiple drives and boot partitions? I've got 3 drives currently, two 3tb HDDs and a 250gb SSD, with one of the HDDs partitioned with ubuntu for messing around and some school work. do you lose access to all data on all drives? is a separate partition safe? on top of that, who the hell keeps anything they care about in a single physical location? I know if I ever got hit with it my dban usb would be running before I had a chance to actually read any popup.

yeh its email phishing, we get about 5-10 emails per week with word or excel docs enclosed in .zip with various attempts to get you to open it: "here's your statement", "you owe this much", "here is our purchase order for your product" etc etc.
They go company wide, so thousands of people receive them at the same time, and undoubtedly, some people open them.
post #24 of 49
Quote:
Originally Posted by xRehab View Post

I was wondering this too, and I visit some pretty sketchy places on the internet fairly consistently without even bothering to VM or run any real AV; just ghostery and uBlock with a malware bytes scan every few months. I feel like it has to be the old email phishing technique (at least for the work PCs that everyone seems to have to deal with, internal email ****s everyone) with no intent on actually getting data, just locking it all up.

on a side note, how much havoc does this stuff cause on systems with multiple drives and boot partitions? I've got 3 drives currently, two 3tb HDDs and a 250gb SSD, with one of the HDDs partitioned with ubuntu for messing around and some school work. do you lose access to all data on all drives? is a separate partition safe? on top of that, who the hell keeps anything they care about in a single physical location? I know if I ever got hit with it my dban usb would be running before I had a chance to actually read any popup.

Any drive that the account has write access to will be encrypted including network shares.
3930k
(20 items)
 
  
Reply
3930k
(20 items)
 
  
Reply
post #25 of 49
Solution. .... zfs plus snapshots
Quote:
Originally Posted by Omega X View Post

I'd rather nuke the hardware from orbit than pay a data ransom.

Agreed
USS CLM8-1701
(39 items)
 
Her Venom
(21 items)
 
Lil Tough Guy
(15 items)
 
CPUMotherboardGraphicsGraphics
AMD FX-8350 Gigabyte 990FXA-UD7 R7970-2PMD3GD5/OC  R7970-2PMD3GD5/OC  
GraphicsGraphicsRAMHard Drive
R7970-2PMD3GD5/OC  R7970-2PMD3GD5/OC  F3-2400C10D-16GTX  OCZ Agility 3 120GB  
Hard DriveHard DriveHard DriveOptical Drive
OCZ Agility 3 120GB  Seagate Barracuda 1TB  Segate Barracuda 3TB Rosewill RCR-IM5001 USB2.0 75 in 1 internal Car... 
Optical DriveCoolingCoolingCooling
Pioneer BDR-208DBK Blu-ray Writer Swiftech H20-220 EDGE HD Liquid Cooling Kit Swiftech Komodo 7970 Swiftech MCP-35X2 
CoolingCoolingCoolingCooling
Swiftech MCP35X2 Heat Sink Swiftech MCP35X Reservoir Swiftech Komodo 7970 Swiftech Komodo 7970 
CoolingCoolingCoolingCooling
Alphacool 240mm XT45 Alphacool 120mm XT45 Alphacool 120mm UT60 FrozenQ PC Mods UV Meteor Light Limited Edition... 
CoolingCoolingOSOS
Koolance Radiator Mounting Bracket with Quick-R... Swiftech Komodo 7970 Windows 7 Windows 8  
MonitorMonitorMonitorMonitor
ASUS VG248QE Black 24" 144Hz 1ms  ASUS VG248QE Black 24" 144Hz 1ms  ASUS VG248QE Black 24" 144Hz 1ms  XFX FXTRISTAND Triple Display Monitor Stand  
KeyboardPowerCaseMouse
Logitech G510 XFX pro 1250w black edition Caselabs MAGNUM M8 Case Razer Naga 
AudioAudioOther
Sony 2.1 Razer Megalodon XFX pro 1250w black edition 
CPUMotherboardGraphicsGraphics
8350 batch 1229 pgn  Asus Crosshair V Formula-Z gigabyte 7770 OC gigabyte 7770 OC 
RAMHard DriveHard DriveHard Drive
F3-2400C10D-16GTX OCZ agaility 3 120  OCZ Agility 3 120gb  Seagate 7200rpm 1tb 
Optical DriveOptical DriveCoolingCooling
Pioneer BDR-208DBK Rosewill RCR-IM5001 USB2.0 75 in 1 internal Car... Swiftech MCP-35X White Top Swiftech Quiet Power 240  
CoolingOSOSMonitor
Swiftech Apogee HD Windows 7 Windows 8 LG E2242 
MonitorKeyboardPowerCase
LG E2242 RAZER Black Lycosa Mirror Special Edition Seasonic x660 Cooler Master Storm Stryker 
Mouse
Razer Lachesis 
CPUMotherboardGraphicsRAM
FX 6100 Sabertooth 990fx R2.0 XFX 7770 Core Edition Samsung 1600 2x4 
RAMHard DriveOptical DriveCooling
Samsung 1600 2x4 Unknown as of now  Piorneer BDR-208DBK Swiftech H220  
OSMonitorKeyboardPower
Windows 8  Samsung 60" 120hz 3d LED TV Unknown Seasonic x750 
CaseMouseAudio
Cooler Master Storm Stryker Unknown Pioneer 5.1 
  hide details  
Reply
USS CLM8-1701
(39 items)
 
Her Venom
(21 items)
 
Lil Tough Guy
(15 items)
 
CPUMotherboardGraphicsGraphics
AMD FX-8350 Gigabyte 990FXA-UD7 R7970-2PMD3GD5/OC  R7970-2PMD3GD5/OC  
GraphicsGraphicsRAMHard Drive
R7970-2PMD3GD5/OC  R7970-2PMD3GD5/OC  F3-2400C10D-16GTX  OCZ Agility 3 120GB  
Hard DriveHard DriveHard DriveOptical Drive
OCZ Agility 3 120GB  Seagate Barracuda 1TB  Segate Barracuda 3TB Rosewill RCR-IM5001 USB2.0 75 in 1 internal Car... 
Optical DriveCoolingCoolingCooling
Pioneer BDR-208DBK Blu-ray Writer Swiftech H20-220 EDGE HD Liquid Cooling Kit Swiftech Komodo 7970 Swiftech MCP-35X2 
CoolingCoolingCoolingCooling
Swiftech MCP35X2 Heat Sink Swiftech MCP35X Reservoir Swiftech Komodo 7970 Swiftech Komodo 7970 
CoolingCoolingCoolingCooling
Alphacool 240mm XT45 Alphacool 120mm XT45 Alphacool 120mm UT60 FrozenQ PC Mods UV Meteor Light Limited Edition... 
CoolingCoolingOSOS
Koolance Radiator Mounting Bracket with Quick-R... Swiftech Komodo 7970 Windows 7 Windows 8  
MonitorMonitorMonitorMonitor
ASUS VG248QE Black 24" 144Hz 1ms  ASUS VG248QE Black 24" 144Hz 1ms  ASUS VG248QE Black 24" 144Hz 1ms  XFX FXTRISTAND Triple Display Monitor Stand  
KeyboardPowerCaseMouse
Logitech G510 XFX pro 1250w black edition Caselabs MAGNUM M8 Case Razer Naga 
AudioAudioOther
Sony 2.1 Razer Megalodon XFX pro 1250w black edition 
CPUMotherboardGraphicsGraphics
8350 batch 1229 pgn  Asus Crosshair V Formula-Z gigabyte 7770 OC gigabyte 7770 OC 
RAMHard DriveHard DriveHard Drive
F3-2400C10D-16GTX OCZ agaility 3 120  OCZ Agility 3 120gb  Seagate 7200rpm 1tb 
Optical DriveOptical DriveCoolingCooling
Pioneer BDR-208DBK Rosewill RCR-IM5001 USB2.0 75 in 1 internal Car... Swiftech MCP-35X White Top Swiftech Quiet Power 240  
CoolingOSOSMonitor
Swiftech Apogee HD Windows 7 Windows 8 LG E2242 
MonitorKeyboardPowerCase
LG E2242 RAZER Black Lycosa Mirror Special Edition Seasonic x660 Cooler Master Storm Stryker 
Mouse
Razer Lachesis 
CPUMotherboardGraphicsRAM
FX 6100 Sabertooth 990fx R2.0 XFX 7770 Core Edition Samsung 1600 2x4 
RAMHard DriveOptical DriveCooling
Samsung 1600 2x4 Unknown as of now  Piorneer BDR-208DBK Swiftech H220  
OSMonitorKeyboardPower
Windows 8  Samsung 60" 120hz 3d LED TV Unknown Seasonic x750 
CaseMouseAudio
Cooler Master Storm Stryker Unknown Pioneer 5.1 
  hide details  
Reply
post #26 of 49
Quote:
Originally Posted by Omega X View Post

I'd rather nuke the hardware from orbit than pay a data ransom.
Quote:
Originally Posted by white owl View Post

*boots dban*
laaaalalalaaaalaaa.

Heh that's exactly my philosophy, which is why I not only keep multiple images on different external HDDs, I also have a cloned SSD that I update bi-weekly to ensure minimal downtime in the worst case scenario. Thankfully I can report that ever since I installed Malwarebytes Pro, I haven't had a single infection since 2011. (well me not visiting ummm, questionable sites as much might also have something to do with it tongue.gif)
post #27 of 49
Quote:
Originally Posted by magnek View Post

Heh that's exactly my philosophy, which is why I not only keep multiple images on different external HDDs, I also have a cloned SSD that I update bi-weekly to ensure minimal downtime in the worst case scenario. Thankfully I can report that ever since I installed Malwarebytes Pro, I haven't had a single infection since 2011. (well me not visiting ummm, questionable sites as much might also have something to do with it tongue.gif)

Same here.

Suspect these people get emails requesting payment for services and in that same email there is an enclosed invoice. Double clicking that "Invoice" launches the ransomeware lachen.gif .

Quite evil but very effective, have gotten a dozen of them recently but I simply delete them immediately, simply because I never get emailed invoices from any clients.
Edited by Elrick - 11/10/15 at 11:15pm
post #28 of 49
Quote:
Originally Posted by CDub07 View Post

What do people click on to get stuff like this? I install cracked programs, visit torrent sites and I haven't came across anything like this.

I have to agree. The only form of AV i have is windows defender and knowing the apps in my startup, task manager, services and i have not been hit by anything forcing a OS reinstall...
I immediately delete emails with zip files and actually only use webmail on my home PC and dont do anything really dodgy.
But yes email attachments are a bad source of these kind of things... people have no common sense sometimes rolleyes.gif
   
Cores Galore
(16 items)
 
CPUGraphicsRAMHard Drive
i7-6700HQ GTX 1070 8GB, GPU AMP Waiting for BIG Vega 16GB 2667mhz Alienware Crucial BX100 1TB 
Hard DriveMonitorMonitorKeyboard
Samsung 960 Pro 512GB Acer XR341CK 34" 3440x1440 @ 85hz awesomness Stock 1920x1080 Logitech G410 Atlas Spectrum 
MouseMouse PadAudio
Logitech G700S Roccat Taito Logitech G930 
CPUMotherboardGraphicsHard Drive
i7-4700QM Alienware M14X Nvidia Geforce GTX 765M Samsung Evo 850 mSATA 256 GB 
Hard DriveOSMonitorMonitor
Crucial BX100 1TB Windows 10 Acer XR341CK Stock 14" 1920x1080 IPS 
KeyboardPowerMouseMouse Pad
Logitech G410 Atlas Spectrum Stock Alienware 180W Logitech G700S Roccat MTW 
AudioAudio
Logitech G930 Audio Technica ATH-M50X 
CPUMotherboardGraphicsRAM
I7 3960X Rampage IV Extreme Black Edition MSI R9 390X Gaming 32GB Corsair Vengence 
Hard DriveHard DriveCoolingOS
Crucial MX200 240GB 1TB Crucial BX100 Custom WC Loop Windows 10 
MonitorMonitorKeyboardPower
Acer P243W Acer P243W Logitech G510S Corsair AX850 
CaseMouseMouse PadAudio
None rght now Logitech G500S Roccat Taito MTW Logitech G930 
  hide details  
Reply
   
Cores Galore
(16 items)
 
CPUGraphicsRAMHard Drive
i7-6700HQ GTX 1070 8GB, GPU AMP Waiting for BIG Vega 16GB 2667mhz Alienware Crucial BX100 1TB 
Hard DriveMonitorMonitorKeyboard
Samsung 960 Pro 512GB Acer XR341CK 34" 3440x1440 @ 85hz awesomness Stock 1920x1080 Logitech G410 Atlas Spectrum 
MouseMouse PadAudio
Logitech G700S Roccat Taito Logitech G930 
CPUMotherboardGraphicsHard Drive
i7-4700QM Alienware M14X Nvidia Geforce GTX 765M Samsung Evo 850 mSATA 256 GB 
Hard DriveOSMonitorMonitor
Crucial BX100 1TB Windows 10 Acer XR341CK Stock 14" 1920x1080 IPS 
KeyboardPowerMouseMouse Pad
Logitech G410 Atlas Spectrum Stock Alienware 180W Logitech G700S Roccat MTW 
AudioAudio
Logitech G930 Audio Technica ATH-M50X 
CPUMotherboardGraphicsRAM
I7 3960X Rampage IV Extreme Black Edition MSI R9 390X Gaming 32GB Corsair Vengence 
Hard DriveHard DriveCoolingOS
Crucial MX200 240GB 1TB Crucial BX100 Custom WC Loop Windows 10 
MonitorMonitorKeyboardPower
Acer P243W Acer P243W Logitech G510S Corsair AX850 
CaseMouseMouse PadAudio
None rght now Logitech G500S Roccat Taito MTW Logitech G930 
  hide details  
Reply
post #29 of 49
Quote:
Originally Posted by Cavey00 View Post

My work pc has this again. I first got it at the beginning of this year and it did in fact lock up all my data. We were using RollbackRX at the time which is pretty terrible, but it worked in restoring my machine on Windows 7. I've since formatted the drive and installed Win10. Well, someone at one of our sister stores apparently still had it on their machine and it's wreaking havoc on random pc's throughout the different stores. I'm only a hobbyist but I'm calling BS on my IT guys for not nipping this thing in the butt because once again my pc has it, as does the IT guy's work machine. Lets just say it inspired me to not only have all my family pictures at home on multiple drives but also on a Bluray disk.
uhm, that thing sits in emails... it doesn't stay dormant on any PC. It encrypts your files and self-destroys...
IT guys not nipping this in the butt could mean that your company does not have appropriate anti-spam appliance or even some form of software. FYI even symantec msg. gateway on VM can stop it...
But be my guest, blame this phishing email virus on your IT... and don't forget to say "I didn't do nothing!", that's usually what people do.
Skylake
(12 items)
 
  
CPUMotherboardGraphicsRAM
i7 6700k Asus Maximus VIII Gene GTX 970 Kingston hyperx Savage  
Hard DriveCoolingOSMonitor
Samsung 850 PRO NH-D14 Win 7 Philips 60 
KeyboardPowerCaseMouse
Ducky SHine 4 TX950 Air 540 G502 
  hide details  
Reply
Skylake
(12 items)
 
  
CPUMotherboardGraphicsRAM
i7 6700k Asus Maximus VIII Gene GTX 970 Kingston hyperx Savage  
Hard DriveCoolingOSMonitor
Samsung 850 PRO NH-D14 Win 7 Philips 60 
KeyboardPowerCaseMouse
Ducky SHine 4 TX950 Air 540 G502 
  hide details  
Reply
post #30 of 49
Quote:
Originally Posted by DiNet View Post

uhm, that thing sits in emails... it doesn't stay dormant on any PC. It encrypts your files and self-destroys...
IT guys not nipping this in the butt could mean that your company does not have appropriate anti-spam appliance or even some form of software. FYI even symantec msg. gateway on VM can stop it...
But be my guest, blame this phishing email virus on your IT... and don't forget to say "I didn't do nothing!", that's usually what people do.

Touchy! The only email I get at work is from work people, so unless its residing in someone's email I don't know what to say. They do have a spam blocker of some sort because I get a daily report of what was blocked. Not sure how good that Dell Sonic Wall is. Don't get me wrong, I like my IT guys and appreciate that their job is difficult. I'm just stating that when I bring something up like this, maybe it shouldn't get brushed off.
Recycled Aluminum
(15 items)
 
The Bug
(15 items)
 
 
CPUMotherboardGraphicsRAM
i5 3570K AsRock Z77-ITXe GTX670 SC Samsung Model MV-3V4G3D/US 
Hard DriveOptical DriveCoolingCooling
Intell ssd 530 Xbox 360 HD DVD external XSPC Raystorm xspc raystorm 
OSMonitorKeyboardPower
Windows 8 Pro Yamakasi Catleap 2703 Cooler Master Quickfire Pro Corsair AX650 
CaseMouseAudio
Lian Li T1R Logitech G9 Turtle Beach 5.1 
  hide details  
Reply
Recycled Aluminum
(15 items)
 
The Bug
(15 items)
 
 
CPUMotherboardGraphicsRAM
i5 3570K AsRock Z77-ITXe GTX670 SC Samsung Model MV-3V4G3D/US 
Hard DriveOptical DriveCoolingCooling
Intell ssd 530 Xbox 360 HD DVD external XSPC Raystorm xspc raystorm 
OSMonitorKeyboardPower
Windows 8 Pro Yamakasi Catleap 2703 Cooler Master Quickfire Pro Corsair AX650 
CaseMouseAudio
Lian Li T1R Logitech G9 Turtle Beach 5.1 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Software News
Overclock.net › Forums › Industry News › Software News › [TR/NS] World's Worst Ransomware Now Even Worse: Demands Money and Mocks You.