Windows 10: New Satana ransomware encrypts user files and master boot record

And the news just keeps getting better *sarc. Take the time to make back ups & system images.

System Image - Create in Windows 10 - Windows 10 Forums

New Satana ransomware encrypts user files and master boot record | PCWorld

:)

 

Ransomeware

The 1st example is over 5 years old and things have got far more sophisticated.

There are a number of tools that can rebuild the master boot record and others that can still read the data after a rebuild.

Current ransomware such as Cryptlocker encrypts all user data files individually with deep coding which is virtually uncrackable. Why just work on one file when they can do hundreds? It leaves Windows still functional which makes it easier for the victim
to follow through the ransom payment.

 

How crypto ransomware spreads... is it decryptable...should I pay the ransom

The
master decryption keys and decryptor for all variants of CrySiS ransomware have been released and Kaspersky's

Rakhni Decryptor was updated (v1.17.8.0) to decrypt files encrypted by this infection.

 

And this is why an OFFLINE(external disk stored in the closet, not just turned off, but unplugged) is so important.
I do weekly('s enuff 4 me*Smile) to my 2nd internal, fo incase I mess up something, but, once a month, or so., I update my offline disk. I set it up, let Macrium run and image all 3 internal(for partitioning look at my specs) while I shave, shower, go shopping and eat dinner. I even image my weekly image partition(that's why it takes half a day, it needs to open the compressed files to read them).

Respect, I gotta hand it to them, encrypting the MBR... and Windows or any PE environment doesn't know where anything is .

 

A neighbour (a retired 95 year old navy Chaplin) showed me his tablet which he could not shut and it showed a webpage from the cyberpolice demanding $200 or else. I managed to get to shut down but when it rebooted that webpage came up immediately. He took it to a local Geek Squad and they managed to reset it to factory defaults for only $210. *cry Not quite sure now who the crooks are!

I keep an offline hard drive with a copy of my system and it is the best protection. My only problem is keeping it current.