OT: Anyone have experience with CryptoWall 3.0 virus?

AHSDawg

Redshirt
Sep 18, 2012
1,680
0
0
And restoring your files/photos? Seems to be a very nasty ransom ware. Wife's work computer got it and has some freaking pics tied up that had not gotten uploaded to the cloud yet.

Many thanks if you do.
 

Hammer Down

Redshirt
Jul 19, 2014
1,360
0
0
And restoring your files/photos? Seems to be a very nasty ransom ware. Wife's work computer got it and has some freaking pics tied up that had not gotten uploaded to the cloud yet.

Many thanks if you do.
Yeah okay ha ha ha

Sorry, not laughing at your misfortune, but put the porn down bro.
 

AHSDawg

Redshirt
Sep 18, 2012
1,680
0
0
That is the sad part...

My laptop, sure. Would have understood. This happened on my wife's computer while my 5 year old was doing homework through ItsLearning... Not even kidding...
 

SwampDawg

Sophomore
Feb 24, 2008
2,193
122
63
I wouldn't object to viewing a little porn now and again, but it's been a long time since I did, just because of the virus danger. I don't know what the legal penalty is for those ********, but it's not enough. it's bad enough when a person's computer crashes just from old age or whatever, but when it crashes because of some ******* (I repeat myself) that don't have anything better to do it really pisses me off. They need to catch them and throw them in jail for about 5 years. I can't be that hard to identify them.
 

AHSDawg

Redshirt
Sep 18, 2012
1,680
0
0
This is some nasty little s*** from Russia

Basically, it copies all of your files, then encrypts them, deletes your originals and then sends you a message with a link to a BitCoin account telling you that if you don't pay $300 within 72 hours, all is deleted. Pretty hardcore stuff.
 

RingN2012

Redshirt
Sep 10, 2012
577
0
0
Basically, it copies all of your files, then encrypts them, deletes your originals and then sends you a message with a link to a BitCoin account telling you that if you don't pay $300 within 72 hours, all is deleted. Pretty hardcore stuff.

******** that sounds rough. You don't have Norton running? I would recommend everybody have Norton or McAfee
 
Aug 24, 2012
21
0
0
Without a backup you are pretty much screwed. Try right-clicking the files/folder and choose Previous Versions. If you have that enabled you can restore from it.
 

MabenMaroon

Redshirt
Feb 2, 2014
128
0
0
No experience with that virus but got the FBI virus ( also a ransom ware type ) and used the services of iYogi to clean it up. They were a pretty good bunch to work with except for all of the up-selling and add-on sales they are trained to push. But that is how the tech's make their living. Got the virus from my daughter using one of those iTune's knock off sites, trying to download tunes on the cheap.
Am using BitDefender Protection now and have not had any problems in several years.
 

horshack.sixpack

All-American
Oct 30, 2012
12,424
9,930
113
And restoring your files/photos? Seems to be a very nasty ransom ware. Wife's work computer got it and has some freaking pics tied up that had not gotten uploaded to the cloud yet.

Many thanks if you do.

Pay and maybe get them back. Haven't run across a non-paying solution...
 

MabenMaroon

Redshirt
Feb 2, 2014
128
0
0
I sure the hell wouldn't pay a damn thing to anybody, I can promise you they won't unlock the computer. Like I said earlier, contact one of the on-line or phone based IT services. They stay up on these things in order to compete with each other.
Another good thing to do, if you have the time and patience, is contact the states attorney general's office, cyber crimes division. They have a staff of young eager beaver computer techs that love tackling things like this and who knows, they might even be able to catch one of the bastards every now and then. And they will come down heavy on them if they do catch them.
 

Sladedawg

Redshirt
Mar 3, 2015
1
0
0
Please don't pay them. Visit YouTube... Type in the name of the virus or symptoms. I use it all the time when I'm working on computers. Hope this helps
 

Shamoan

Redshirt
Jun 27, 2013
12,466
0
0
not trying to sound like a jerk, but thats awesome (sorry for your misfortune). leave it to the russians....bunch of sneaky 17s.
 

patdog

Heisman
May 28, 2007
61,339
33,065
113
My parents were almost the victims of ransomware today. Got a call from my mom about 5:00 saying their Apple computer had blown up and a box popped up with a number to call. They called the number and were sold a very nice "support package" to protect their computer for 2 years. All they needed was their credit card number. They gave it to them, but then thought this just doesn't sound right, so they called me. A quick Google confirmed it was a scam. Thank God they called so quickly. Dad called the brokerage firm and got his accounts frozen and Mom called the credit card company to keep the charge from coming through. Scary. And a lesson that Apple's do get viruses and malware too.
 

DerHntr

All-Conference
Sep 18, 2007
16,209
3,714
113
I wouldn't object to viewing a little porn now and again, but it's been a long time since I did, just because of the virus danger. I don't know what the legal penalty is for those ********, but it's not enough. it's bad enough when a person's computer crashes just from old age or whatever, but when it crashes because of some ******* (I repeat myself) that don't have anything better to do it really pisses me off. They need to catch them and throw them in jail for about 5 years. I can't be that hard to identify them.

I'm sorry but damn it you have me laughing at your one typo in this post. You go on and on about porn and then write that last sentence. Hilarious.
 

ababyatemydingo

All-Conference
Nov 27, 2008
4,152
3,167
113
And restoring your files/photos? Seems to be a very nasty ransom ware. Wife's work computer got it and has some freaking pics tied up that had not gotten uploaded to the cloud yet.

Many thanks if you do.

I'm an IT professional. There's no current removal process, and there's not even a hint of being close to developing a removal process. You can't simply "kill a service" and delete a file. Your personal files will still be encrypted. I'm advising my clients to make sure they are using a cloud-based backup service, such as Carbonite. It's $60/yr, and worth every penny. A local backup (external hard drive or thumb drive plugged into the PC) won't protect you, as CryptoWall encrypts the files on any external device plugged into the PC, as well. If you regularly backup your files to a local backup device, make sure you unplug the external hard drive or thumb drive from the PC after backing up. Also, Fully update your PC, then download cloning software like CloneZilla (it's free), and make an image of your clean system. That way, if you're infected, all you have to do is re-image it with the clean image of your system that CloneZilla created. If anyone wants step by step instructions for making a CloneZilla image, pm me and I'll provide that. Also, google is your friend.
 
Last edited:

Optimus Prime 4

Redshirt
May 1, 2006
8,560
0
0
No macs yet, im sure no linux, though I doubt anyone here uses that

I can however attest that Macs can in fact get nasty viruses, I've had three I think that I couldn't remove, and I've got enterprise grade Sophos installed. Luckily I don't keep much on the hard drive and just have it reimaged.
 

ababyatemydingo

All-Conference
Nov 27, 2008
4,152
3,167
113
What platforms are targeted by this? Guessing strictly Windows systems.



OP4 is correct. It's a Windows issue, for now. No root access on Linux, unix, or bsd (Apple) systems. As OP4 said, Macs CAN get infected with malware. Just not malware specifically written for Windows systems. ie. An .exe file won't install on a Mac.
 

AHSDawg

Redshirt
Sep 18, 2012
1,680
0
0
Putin encourages most of this and harbors them because they attack the US mostly. Something like 70% of the cyber attacks come from Russian and the eastern bloc.
 

ababyatemydingo

All-Conference
Nov 27, 2008
4,152
3,167
113
http://map.ipviking.com/ to see where most of the attacks are coming from and going to. Like I responded earlier if you don't have a backup then Shadow Copies are your best bet if they are enabled. If not you are just kind of SOL.

It's a good site to look at for amusement, but EVERY group putting out malware is behind multiple proxies. This map appears to not go any deeper than 1 layer IP. 80% or more is split between Russia and China. But not according to that map.
 

Optimus Prime 4

Redshirt
May 1, 2006
8,560
0
0
My viruses typically come from sports streaming sites I have to use when traveling. My ipad however seems immune from viruses
 

AHSDawg

Redshirt
Sep 18, 2012
1,680
0
0
Yeah, these people are masking themselves multiple times. One would think that the link to money would eventually get them though. The FBI is working these hard but as long as the people are actually in Russia/China, the FBI cannot get to them. They know this and Putin knows this.
 
Maroon and White

Latest

  1. 01 Maroon and White Basketball Xavier 81-63 Mississippi State: Distance shooting hurts Bulldogs in Greenbrier defeat
  2. 02 Maroon and White Football Kickoff Time Change: Mississippi State vs. Auburn
  3. 03 Maroon and White Football Mississippi State Keys to Victory vs. Auburn
  4. 04 Rivals Basketball Recruiting 4-star center Chris Brown commits to Mississippi State
  5. 05 Maroon and White Football Mississippi State Week 11 Preview: Auburn Q and A