Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 


607 posts

Ultimate Geek
+1 received by user: 28


  Reply # 937409 19-Nov-2013 16:28
Send private message

Gilco2: I was asked to clean a friends computer today.  He is running XP and messages coming up that his files will be encrypted and locked by NZ Police for watching porn or something to that effect.
  I never saw the message myself so unsure exact wording.  Computer was still working but he said the message started Sunday.
  I ran MSE and that was clear and ran malwarebytes which picked up 15 infections.  I ran ccleaner as well.  Also installed Firefox and adblocker.  Everything else all updated.
Is that all i needed to do or will it still lock later


Check any documents/pictures etc... you may find they are encrypted.  If none of them open properly or show garbage in msword then they are encrypted.  In that case discard them and restore from latest backup if you have one, if not then your only option is to pay the ransom for the private key unless you have a surplus 1000+ years to brute force it.

1483 posts

Uber Geek
+1 received by user: 121

Subscriber

  Reply # 937427 19-Nov-2013 17:00
Send private message

He is a pastor and has no pictures.  But he has all his sermons.  Opened a few and they opened okay.  He has backup hard drive bought from Bond and Bond when they were around and I cant remember brand but at the time after the inital setup it automatically backs up.  Of course doesnt mean they are okay as virtually permanently connected.  It scanned clear.
 He has been on youtube a lot looking at Liberty News which is all against Obama and virtually calling him devil in sheeps clothing and a liar.  Well we know thats true with most politicians anyway. But thats a different topic not for here. Just saying that what he is watching




HTPC Intel Pentium G3258 cpu, Gigabyte H97n-wifi motherboard, , 8GB DDR3 ram, onboard  graphics. Hauppuage HVR 5500 tuner,  Silverstone LC16M case, Windows 10 pro 64 bit using Nextpvr and Kodi


1905 posts

Uber Geek
+1 received by user: 1052


  Reply # 937447 19-Nov-2013 17:31
One person supports this post
Send private message

Call me paranoid, but I don't bother trying to repair a system after a minor infection let alone something like this. I just grab anything critical and start again (either restore a backup or reinstall).

I always worry there's something lurking in the background. Like the odd one they find and say, "looks like it's been around for years".




Location: Dunedin

1483 posts

Uber Geek
+1 received by user: 121

Subscriber

Reply # 937460 19-Nov-2013 18:14
Send private message

I would have preferred to reinstall as I also wonder if something was left behind.  I tried to get him to go to Windows 7 or even Linux Mint which would be ideal for what he does.   Maybe after he sees Windows 8.1 he will upgrade to that.  Next week he wants me to upgrade the Church's computer to Windows 8 from Vista.  Unfortunately I have to use the 32 bit version as he still insists on using Word 2.0.  I have tried and it does work on the 32 bit version of Windows 8.  Now days I prefer to just use 64 bit version.
 I guess I will find out over the next week if any of police virus is still there




HTPC Intel Pentium G3258 cpu, Gigabyte H97n-wifi motherboard, , 8GB DDR3 ram, onboard  graphics. Hauppuage HVR 5500 tuner,  Silverstone LC16M case, Windows 10 pro 64 bit using Nextpvr and Kodi


BDFL - Memuneh
61022 posts

Uber Geek
+1 received by user: 11851

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 937474 19-Nov-2013 19:02
Send private message

andrewNZ: Call me paranoid, but I don't bother trying to repair a system after a minor infection let alone something like this. I just grab anything critical and start again (either restore a backup or reinstall).


That's the best course. If anything happens, reinstall fresh, restore data from backup, reinstall apps from original sources.






1483 posts

Uber Geek
+1 received by user: 121

Subscriber

  Reply # 937478 19-Nov-2013 19:05
Send private message

thats why I like a system image.  Install Windows and programs I want and set up how I like, then create system image and if/when time comes there is a problem like police virus I can restore image in around 20 minutes. Then add the data from the external backups




HTPC Intel Pentium G3258 cpu, Gigabyte H97n-wifi motherboard, , 8GB DDR3 ram, onboard  graphics. Hauppuage HVR 5500 tuner,  Silverstone LC16M case, Windows 10 pro 64 bit using Nextpvr and Kodi


1905 posts

Uber Geek
+1 received by user: 1052


  Reply # 937616 19-Nov-2013 23:01
Send private message

Windows Home Server for me. Bare metal restore and I'm up and running in under 30 minutes




Location: Dunedin

650 posts

Ultimate Geek
+1 received by user: 156


  Reply # 937628 19-Nov-2013 23:50
Send private message

gareth41: How exactly are people getting infected with this?  Ive had to remove this from several of our customers machines, but just cant work out how exactly they are being infected.  Im assuming web servers emplying poor security are being compomised and used to carry this ransomware?  Most of them have reported being in google image search.


Not infected, But decided I need some form of offline backup for my personal stuff (photo and music library, and the weekly image backups I do, and Windows File backups, etc)

Currently I have weekly and daily incremental backups to a Qnap 412 for all my systems, and have tested usb stick recovery media for each system. 

For my Photos I also burn a monthly DVD of all the photo's taken in that month. My Music Library also is backed up on DVD.

I'm looking at getting one of these: 

http://www.pbtech.co.nz/index.php?z=p&p=HDDSEA0443&name=Seagate-4TB-Expansion-Desktop-3.5-USB-3.0-External

Questions:

Do I really need it? (looking at offline storage for the system Image backups, Windows File Backups mostly)

Is anyone using one, or has experience of it?

Running Avast Internet and it is set to update hourly.

All my emails go through Pop Up Peeper, a text only online email viewer. Any I dont know about or dont trust get binned before downloading to Thunderbird.


1 | 2 
View this topic in a long page with up to 500 replies per page Create new topic

Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Intel introduces new NUC kits and NUC mini PCs
Posted 16-Aug-2018 11:03


The Warehouse leaps into the AI future with Google
Posted 15-Aug-2018 17:56


Targus set sights on enterprise and consumer growth in New Zealand
Posted 13-Aug-2018 13:47


Huawei to distribute nova 3i in New Zealand
Posted 9-Aug-2018 16:23


Home robot Vector to be available in New Zealand stores
Posted 9-Aug-2018 14:47


Panasonic announces new 2018 OLED TV line up
Posted 7-Aug-2018 16:38


Kordia completes first live 4K TV broadcast
Posted 1-Aug-2018 13:00


Schools get safer and smarter internet with Managed Network Upgrade
Posted 30-Jul-2018 20:01


DNC wants a safer .nz in the coming year
Posted 26-Jul-2018 16:08


Auldhouse becomes an AWS Authorised Training Delivery Partner in New Zealand
Posted 26-Jul-2018 15:55


Rakuten Kobo launches Kobo Clara HD entry level reader
Posted 26-Jul-2018 15:44


Kiwi team reaches semi-finals at the Microsoft Imagine Cup
Posted 26-Jul-2018 15:38


KidsCan App to Help Kiwi Children in Need
Posted 26-Jul-2018 15:32


FUJIFILM announces new high-performance lenses
Posted 24-Jul-2018 14:57


New FUJIFILM XF10 introduces square mode for Instagram sharing
Posted 24-Jul-2018 14:44



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.