Windows 10: Locky malware, lucky to avoid it

Cluster Head · Feb 25, 2016

You may have seen reports of the Locky malware circulating the web; we think this is a good time to discuss its distribution methods, and reiterate some best-practice methods that will help prevent infection.

We’ve seen Locky being distributed by spam email, not in itself a unique distribution method, but this means that spreading is broad and not isolated to any particular region. This ransomware knows no borders, and we’ve seen high infection rates across the world.
The Locky email attachment usually arrives as a Word document, but could also be an Excel document, that appears to be an invoice. We’ve also seen the following downloaders distribute Ransom:Win32/Locky.A:
•TrojanDownloader:O97M/Bartallex
•TrojanDownloader:BAT/Locky.A
•TrojanDownloader:JS/Locky.A

If you open this file and allow the macro to run, the malware is downloaded and runs on your PC, encrypting your files. A ransom message is then displayed demanding payment in order to unlock your encrypted files. Note that once your files are encrypted, the only guaranteed way to restore them is from backup. Microsoft does not recommend you pay the ransom; there is no guarantee that this will give you access to your files.

While Microsoft detects and removes Locky, we recommend you disable macros to help prevent this and other macro-downloaded threats from infecting your PC, and then only enable macros that you trust, on a case-by-case basis. To help keep your enterprise secure, consider using a trusted location for files in your enterprise, then you can store documents that require macros there. You can also use our cloud protection services to help boost your protection; this, and other advice on how to help keep your PC protected are outlined below.
Click to expand...

Read more: https://blogs.technet.microsoft.com/...y-to-avoid-it/

:)

bhringer · Feb 25, 2016

How crypto ransomware spreads... is it decryptable...should I pay the ransom

Locky malware, lucky to avoid it

Locky malware, lucky to avoid it

Microsoft security products are often criticized for lack of protection from crypto-ransomware. Although the following video represents a certain scenario (boot scan) it indicates Windows Defender (Win 10) and Microsoft Security Essentials provide protection.

Note: The video author has tested a number of AV/AM products but has not done a comparative, so I suggest viewing the videos of other security products that had same testing. This is not a random YT video I chose, to the best of my knowledge they are a
valued
contibutor at
malwaretips.com. (yet I've been off the mark before0

Windows Defender and MSE Boot Time Protection

~

PS. If you don't appreciate the blues soundtrack, mute it, commentary via notepad is adequate.

PA Bear - MS MVP · Feb 25, 2016

Thor Infection- Encrypted Word documents

Start here =>
http://www.bleepingcomputer.com/news/security/locky-ransomware-switches-to-thor-extension-after-being-a-bad-malware/

<QP>

At this time the only way to recover encrypted files is via a backup, or if you are incredibly lucky, through Shadow Volume Copies.

</QP>

Windows 10: Locky malware, lucky to avoid it

Locky malware, lucky to avoid it

Locky malware, lucky to avoid it

Locky malware, lucky to avoid it - Similar Threads - Locky malware lucky

[HELP] Disabling Autoplay functionality to avoid malware?

[HELP] Disabling Autoplay functionality to avoid malware?

avoid signing in

How to avoid this ?

Block or Avoid LUCIFER Ransomeware or Malware detected on 24-06-2020

Is Lucky Patcher a safe ad blocking application?

Problem with super lucky's tale

Locky Virus... help please!

I Must be one lucky person