Il giorno 08/03/16 08.16, "G3-5 List" ha scritto:

> If I use CCC to update a clone backup more frequently than every 72 hours,
> when I discover I¹ve been "ransomwared² won¹t it be too late, i.e., the clone
> will have been contaminated too, right?

Well, yes and no.

As long as the backup happened BEFORE the malware started encrypting your
HD, the backup would contain the malware (Transmission 2.90 in this case),
but its data would remain clean, NOT encrypted.
The encryption happens only (AFAIK) when the malware is active and running,
not just because the malware is on a disk.

Hence, you could clean your Mac's HD, remove the malware from the backup,
and restore the backup; and everything should be fine.
Of course I would keep an eye on which Transmission version I would be
running.

As others have noted, backup disks can easily be compromised by malware when
they are connected 24/7. As long as a a disk is on its own (not connected),
no software can alter its content whatsoever.

A good backup strategy would be having an always-connected backup disk (e.g.
using Time Machine), and another disk for periodic backups (e.g. once a
week), maybe stored offsite.
This strategy would offer the safety of both an up-to-date backup, and a
backup safe from whatever is happening to your computer right now (be it
malware, a thief, fire, etc.).


-- 
-- 
You received this message because you are a member of G-Group, a group for 
those using G3, G4, and G5 desktop Macs - with a particular focus on Power Macs.
The list FAQ is at http://lowendmac.com/lists/g-list.shtml and our netiquette 
guide is at http://www.lowendmac.com/lists/netiquette.shtml
To post to this group, send email to g3-5-list@googlegroups.com
For more options, visit this group at http://groups.google.com/group/g3-5-list

--- 
You received this message because you are subscribed to the Google Groups 
"G-Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to g3-5-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to