Windows 10: Encrypted Malware

Slightly off topic - I'm running Win10 on a NTFS formatted disk and have another sata connected hd that I use for backup (this backup hd is also formatted NTFS). If I were to open one of these encryption malware emails and it (virtually instantly) encrypted my hd would my 2nd sata connected hd also be in danger or is it just the hd the email client resides on that is encrypted?

:)

 

How crypto ransomware spreads... is it decryptable...should I pay the ransom

Crypto malware typically will scan and encrypt whatever data files it finds on computers connected in the same network with a drive letter including removable drives, network shares, and even DropBox mappings...if there is a drive letter on your
computer it will be scanned for data files and encrypt them. Some crypto malware will scan all of the drive letters that match certain file extensions and when it finds a match, it encrypts them. Other crypto malware utilize a white list and will
encrypt all files unless it has certain excluded extensions or is located at a certain area on the system.

 

Ramsomware and USB device protection

Most crypto malware (ransomware) typically will run under the security credentials of the user....it will run on non-admin accounts under the same privileges as the infected user and encrypt any files that are accessible to that user. If the user can write
to a file then the ransomware will be able to encrypt it. Ransomware needs write-access to files it encrypts so it will not be able to encrypt files owned by another account without write-access while running as a non-admin account.

Since crypto malware can run as a non-admin user, you will not see a UAC prompt. If your daily user account is member of the Administrator group, the malware can install itself to run for all users.

 

Hi.
These encryption malware will encrypt everything connected to the system; some even will attack unmapped network shares. The only sure way to keep a drive safe is to have it disconnected when not in use.

Might want to have a read of this:
Solved BitDefender Releases Combo Crypto-Ransomware Vaccine - Windows 10 Forums

.