Re: Fwd: Re: Ransom Virus
Now that is funny!! On 2014-06-20 00:46, Lyle Tuttle wrote: Someone should have told the IRS about backups. well, I wish your friend a lot of luck. The encryption is very difficult to break and would likely take longer than its worth. This is why I strongly recommend daily backups of important data. I have already seen this on my windows laptop. Fortunately, I had already made a backup of the entire system. So, It was easy for me to erase using a Linux rescue disk and then put the old OS back in place. THe only reason for me to have windows at all around here is for some of the windows specific applications that are able to be used with JAWS (screen reader for the blind). All the rest of the time I spend on either the Linux partition on this mac, or OS X (where I do all my mail). So, there you have the lesson. Backup, backup, and more backup (even make a backp of the backup). -eric On Jun 19, 2014, at 7:19 PM, Ralph Prowell wrote: Just recently a friend of mine opened an outlook message that asked her to download a program that turned out to be a ransom virus and has encrypted all of her Microsoft office files and are wanting her to pay a ransom of $500 to get her files back. Has anyone had any success in retrieving these ransom files from an infected machine? If so please contact me if you have any ideas how to retrieve these files. Thank you, Ralph Sent from my iPad --- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss [1] Links: -- [1] http://lists.phxlinux.org/mailman/listinfo/plug-discuss --- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss --- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss
Re: Ransom Virus
http://arstechnica.com/security/2014/06/warning-your-phone-is-locked-crypto-ransomware-makes-its-debut-on-android/ :-)~MIKE~(-: On Fri, Jun 20, 2014 at 3:22 AM, Rprowell wrote: > Ich danke Dir Hans > > Sent from my iPhone > > > On Jun 20, 2014, at 2:46 AM, "der.hans" wrote: > > > > Am 19. Jun, 2014 schwätzte Ralph Prowell so: > > > > moin moin Ralph, > > > >> I agree, I'm a Mac user with my IMac, IPad, and IPhone. I use a > windows laptop for teaching classes using PowerPoint presentations. And I > agree you can't backup often enough. > > > > Apple products are also being hit by this. As are Android devices. It > just > > takes one hole for any system to be susceptable :(. See Mat Honan's Wired > > story for some Apple-specific issues. > > > > BTW, move to GNU/Linux and LibreOffice for the classes :). > > > > As Eric said: backups, backups, backups. > > > > Hopefully your friend has learned to never again download an application > > from email, especially when using Outlook. > > > > You might see if a file recovery program can find old copies on the > > filesystem. Same for cache files. > > > > Mat Honan article. > > > > > http://www.wired.com/gadgetlab/2012/08/apple-amazon-mat-honan-hacking/all/ > > > > ciao, > > > > der.hans > > > >> Sent from my iPad > >> > >>> On Jun 19, 2014, at 10:25 PM, Eric Oyen wrote: > >>> > >>> well, I wish your friend a lot of luck. The encryption is very > difficult to break and would likely take longer than its worth. > >>> > >>> This is why I strongly recommend daily backups of important data. I > have already seen this on my windows laptop. Fortunately, I had already > made a backup of the entire system. So, It was easy for me to erase using a > Linux rescue disk and then put the old OS back in place. THe only reason > for me to have windows at all around here is for some of the windows > specific applications that are able to be used with JAWS (screen reader for > the blind). All the rest of the time I spend on either the Linux partition > on this mac, or OS X (where I do all my mail). > >>> > >>> So, there you have the lesson. Backup, backup, and more backup (even > make a backp of the backup). > >>> > >>> -eric > >>> > >>>> On Jun 19, 2014, at 7:19 PM, Ralph Prowell wrote: > >>>> > >>>> Just recently a friend of mine opened an outlook message that asked > her to download a program that turned out to be a ransom virus and has > encrypted all of her Microsoft office files and are wanting her to pay a > ransom of $500 to get her files back. > >>>> > >>>> Has anyone had any success in retrieving these ransom files from an > infected machine? If so please contact me if you have any ideas how to > retrieve these files. > >>>> > >>>> Thank you, > >>>> Ralph > >>>> > >>>> Sent from my iPad > >>>> --- > >>>> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org > >>>> To subscribe, unsubscribe, or to change your mail settings: > >>>> http://lists.phxlinux.org/mailman/listinfo/plug-discuss > >>> > >>> --- > >>> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org > >>> To subscribe, unsubscribe, or to change your mail settings: > >>> http://lists.phxlinux.org/mailman/listinfo/plug-discuss > >> --- > >> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org > >> To subscribe, unsubscribe, or to change your mail settings: > >> http://lists.phxlinux.org/mailman/listinfo/plug-discuss > > > > -- > > # http://www.LuftHans.com/http://www.LuftHans.com/Classes/ > > # "Printing and publishing has been a big industry in the city since the > > # early 1800s, when New York publishers were the first American printers > > # with access to pirated English best sellers." > > # -- New York Magazine, 2007Jun04 > > --- > > PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org > > To subscribe, unsubscribe, or to change your mail settings: > > http://lists.phxlinux.org/mailman/listinfo/plug-discuss > --- > PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org > To subscribe, unsubscribe, or to change your mail settings: > http://lists.phxlinux.org/mailman/listinfo/plug-discuss > --- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss
Re: Ransom Virus
Ich danke Dir Hans Sent from my iPhone > On Jun 20, 2014, at 2:46 AM, "der.hans" wrote: > > Am 19. Jun, 2014 schwätzte Ralph Prowell so: > > moin moin Ralph, > >> I agree, I'm a Mac user with my IMac, IPad, and IPhone. I use a windows >> laptop for teaching classes using PowerPoint presentations. And I agree you >> can't backup often enough. > > Apple products are also being hit by this. As are Android devices. It just > takes one hole for any system to be susceptable :(. See Mat Honan's Wired > story for some Apple-specific issues. > > BTW, move to GNU/Linux and LibreOffice for the classes :). > > As Eric said: backups, backups, backups. > > Hopefully your friend has learned to never again download an application > from email, especially when using Outlook. > > You might see if a file recovery program can find old copies on the > filesystem. Same for cache files. > > Mat Honan article. > > http://www.wired.com/gadgetlab/2012/08/apple-amazon-mat-honan-hacking/all/ > > ciao, > > der.hans > >> Sent from my iPad >> >>> On Jun 19, 2014, at 10:25 PM, Eric Oyen wrote: >>> >>> well, I wish your friend a lot of luck. The encryption is very difficult to >>> break and would likely take longer than its worth. >>> >>> This is why I strongly recommend daily backups of important data. I have >>> already seen this on my windows laptop. Fortunately, I had already made a >>> backup of the entire system. So, It was easy for me to erase using a Linux >>> rescue disk and then put the old OS back in place. THe only reason for me >>> to have windows at all around here is for some of the windows specific >>> applications that are able to be used with JAWS (screen reader for the >>> blind). All the rest of the time I spend on either the Linux partition on >>> this mac, or OS X (where I do all my mail). >>> >>> So, there you have the lesson. Backup, backup, and more backup (even make a >>> backp of the backup). >>> >>> -eric >>> >>>> On Jun 19, 2014, at 7:19 PM, Ralph Prowell wrote: >>>> >>>> Just recently a friend of mine opened an outlook message that asked her to >>>> download a program that turned out to be a ransom virus and has encrypted >>>> all of her Microsoft office files and are wanting her to pay a ransom of >>>> $500 to get her files back. >>>> >>>> Has anyone had any success in retrieving these ransom files from an >>>> infected machine? If so please contact me if you have any ideas how to >>>> retrieve these files. >>>> >>>> Thank you, >>>> Ralph >>>> >>>> Sent from my iPad >>>> --- >>>> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org >>>> To subscribe, unsubscribe, or to change your mail settings: >>>> http://lists.phxlinux.org/mailman/listinfo/plug-discuss >>> >>> --- >>> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org >>> To subscribe, unsubscribe, or to change your mail settings: >>> http://lists.phxlinux.org/mailman/listinfo/plug-discuss >> --- >> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org >> To subscribe, unsubscribe, or to change your mail settings: >> http://lists.phxlinux.org/mailman/listinfo/plug-discuss > > -- > # http://www.LuftHans.com/http://www.LuftHans.com/Classes/ > # "Printing and publishing has been a big industry in the city since the > # early 1800s, when New York publishers were the first American printers > # with access to pirated English best sellers." > # -- New York Magazine, 2007Jun04 > --- > PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org > To subscribe, unsubscribe, or to change your mail settings: > http://lists.phxlinux.org/mailman/listinfo/plug-discuss --- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss
Re: Ransom Virus
well, if android is being affected by ransomware what is stopping Linux from being affected by it? :-)~MIKE~(-: On Fri, Jun 20, 2014 at 12:46 AM, der.hans wrote: > Am 19. Jun, 2014 schwätzte Ralph Prowell so: > > moin moin Ralph, > > I agree, I'm a Mac user with my IMac, IPad, and IPhone. I use a windows >> laptop for teaching classes using PowerPoint presentations. And I agree >> you can't backup often enough. >> > > Apple products are also being hit by this. As are Android devices. It just > takes one hole for any system to be susceptable :(. See Mat Honan's Wired > story for some Apple-specific issues. > > BTW, move to GNU/Linux and LibreOffice for the classes :). > > As Eric said: backups, backups, backups. > > Hopefully your friend has learned to never again download an application > from email, especially when using Outlook. > > You might see if a file recovery program can find old copies on the > filesystem. Same for cache files. > > Mat Honan article. > > http://www.wired.com/gadgetlab/2012/08/apple-amazon-mat-honan-hacking/all/ > > ciao, > > der.hans > > Sent from my iPad >> >> On Jun 19, 2014, at 10:25 PM, Eric Oyen wrote: >>> >>> well, I wish your friend a lot of luck. The encryption is very difficult >>> to break and would likely take longer than its worth. >>> >>> This is why I strongly recommend daily backups of important data. I have >>> already seen this on my windows laptop. Fortunately, I had already made a >>> backup of the entire system. So, It was easy for me to erase using a Linux >>> rescue disk and then put the old OS back in place. THe only reason for me >>> to have windows at all around here is for some of the windows specific >>> applications that are able to be used with JAWS (screen reader for the >>> blind). All the rest of the time I spend on either the Linux partition on >>> this mac, or OS X (where I do all my mail). >>> >>> So, there you have the lesson. Backup, backup, and more backup (even >>> make a backp of the backup). >>> >>> -eric >>> >>> On Jun 19, 2014, at 7:19 PM, Ralph Prowell wrote: >>>> >>>> Just recently a friend of mine opened an outlook message that asked her >>>> to download a program that turned out to be a ransom virus and has >>>> encrypted all of her Microsoft office files and are wanting her to pay a >>>> ransom of $500 to get her files back. >>>> >>>> Has anyone had any success in retrieving these ransom files from an >>>> infected machine? If so please contact me if you have any ideas how to >>>> retrieve these files. >>>> >>>> Thank you, >>>> Ralph >>>> >>>> Sent from my iPad >>>> --- >>>> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org >>>> To subscribe, unsubscribe, or to change your mail settings: >>>> http://lists.phxlinux.org/mailman/listinfo/plug-discuss >>>> >>> >>> --- >>> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org >>> To subscribe, unsubscribe, or to change your mail settings: >>> http://lists.phxlinux.org/mailman/listinfo/plug-discuss >>> >> --- >> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org >> To subscribe, unsubscribe, or to change your mail settings: >> http://lists.phxlinux.org/mailman/listinfo/plug-discuss >> >> > -- > # http://www.LuftHans.com/http://www.LuftHans.com/Classes/ > # "Printing and publishing has been a big industry in the city since the > # early 1800s, when New York publishers were the first American printers > # with access to pirated English best sellers." > # -- New York Magazine, 2007Jun04 > --- > PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org > To subscribe, unsubscribe, or to change your mail settings: > http://lists.phxlinux.org/mailman/listinfo/plug-discuss > --- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss
Re: Ransom Virus
Am 19. Jun, 2014 schwätzte Ralph Prowell so: moin moin Ralph, I agree, I'm a Mac user with my IMac, IPad, and IPhone. I use a windows laptop for teaching classes using PowerPoint presentations. And I agree you can't backup often enough. Apple products are also being hit by this. As are Android devices. It just takes one hole for any system to be susceptable :(. See Mat Honan's Wired story for some Apple-specific issues. BTW, move to GNU/Linux and LibreOffice for the classes :). As Eric said: backups, backups, backups. Hopefully your friend has learned to never again download an application from email, especially when using Outlook. You might see if a file recovery program can find old copies on the filesystem. Same for cache files. Mat Honan article. http://www.wired.com/gadgetlab/2012/08/apple-amazon-mat-honan-hacking/all/ ciao, der.hans Sent from my iPad On Jun 19, 2014, at 10:25 PM, Eric Oyen wrote: well, I wish your friend a lot of luck. The encryption is very difficult to break and would likely take longer than its worth. This is why I strongly recommend daily backups of important data. I have already seen this on my windows laptop. Fortunately, I had already made a backup of the entire system. So, It was easy for me to erase using a Linux rescue disk and then put the old OS back in place. THe only reason for me to have windows at all around here is for some of the windows specific applications that are able to be used with JAWS (screen reader for the blind). All the rest of the time I spend on either the Linux partition on this mac, or OS X (where I do all my mail). So, there you have the lesson. Backup, backup, and more backup (even make a backp of the backup). -eric On Jun 19, 2014, at 7:19 PM, Ralph Prowell wrote: Just recently a friend of mine opened an outlook message that asked her to download a program that turned out to be a ransom virus and has encrypted all of her Microsoft office files and are wanting her to pay a ransom of $500 to get her files back. Has anyone had any success in retrieving these ransom files from an infected machine? If so please contact me if you have any ideas how to retrieve these files. Thank you, Ralph Sent from my iPad --- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss --- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss --- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss -- # http://www.LuftHans.com/http://www.LuftHans.com/Classes/ # "Printing and publishing has been a big industry in the city since the # early 1800s, when New York publishers were the first American printers # with access to pirated English best sellers." # -- New York Magazine, 2007Jun04--- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss
Fwd: Re: Ransom Virus
Someone should have told the IRS about backups. well, I wish your friend a lot of luck. The encryption is very difficult to break and would likely take longer than its worth. This is why I strongly recommend daily backups of important data. I have already seen this on my windows laptop. Fortunately, I had already made a backup of the entire system. So, It was easy for me to erase using a Linux rescue disk and then put the old OS back in place. THe only reason for me to have windows at all around here is for some of the windows specific applications that are able to be used with JAWS (screen reader for the blind). All the rest of the time I spend on either the Linux partition on this mac, or OS X (where I do all my mail). So, there you have the lesson. Backup, backup, and more backup (even make a backp of the backup). -eric On Jun 19, 2014, at 7:19 PM, Ralph Prowell wrote: > Just recently a friend of mine opened an outlook message that asked her to download a program that turned out to be a ransom virus and has encrypted all of her Microsoft office files and are wanting her to pay a ransom of $500 to get her files back. > > Has anyone had any success in retrieving these ransom files from an infected machine? If so please contact me if you have any ideas how to retrieve these files. > > Thank you, > Ralph > > Sent from my iPad --- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss --- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss
Re: Ransom Virus
This sounds like the CyptoLocker virus. This article gives a good overview. http://windowssecrets.com/top-story/cryptolocker-a-particularly-pernicious-virus/ I have heard of companies being hit by this virus and paying the"ransom" then they did get thedecryption keys and got their data back. Other than that there is no way to get your data back (other than a restore from backup). I wish you luck! Peter On 6/19/2014 7:19 PM, Ralph Prowell wrote: Just recently a friend of mine opened an outlook message that asked her to download a program that turned out to be a ransom virus and has encrypted all of her Microsoft office files and are wanting her to pay a ransom of $500 to get her files back. Has anyone had any success in retrieving these ransom files from an infected machine? If so please contact me if you have any ideas how to retrieve these files. Thank you, Ralph Sent from my iPad --- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss --- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss
Re: Ransom Virus
Best bet is to restore or reinstall the encrypted files. Then when it is in good order make a disk backup with clonezilla or granted. On Jun 19, 2014 8:29 PM, "Ralph Prowell" wrote: > I agree, I'm a Mac user with my IMac, IPad, and IPhone. I use a windows > laptop for teaching classes using PowerPoint presentations. And I agree > you can't backup often enough. > > Sent from my iPad > > > On Jun 19, 2014, at 10:25 PM, Eric Oyen wrote: > > > > well, I wish your friend a lot of luck. The encryption is very difficult > to break and would likely take longer than its worth. > > > > This is why I strongly recommend daily backups of important data. I have > already seen this on my windows laptop. Fortunately, I had already made a > backup of the entire system. So, It was easy for me to erase using a Linux > rescue disk and then put the old OS back in place. THe only reason for me > to have windows at all around here is for some of the windows specific > applications that are able to be used with JAWS (screen reader for the > blind). All the rest of the time I spend on either the Linux partition on > this mac, or OS X (where I do all my mail). > > > > So, there you have the lesson. Backup, backup, and more backup (even > make a backp of the backup). > > > > -eric > > > >> On Jun 19, 2014, at 7:19 PM, Ralph Prowell wrote: > >> > >> Just recently a friend of mine opened an outlook message that asked her > to download a program that turned out to be a ransom virus and has > encrypted all of her Microsoft office files and are wanting her to pay a > ransom of $500 to get her files back. > >> > >> Has anyone had any success in retrieving these ransom files from an > infected machine? If so please contact me if you have any ideas how to > retrieve these files. > >> > >> Thank you, > >> Ralph > >> > >> Sent from my iPad > >> --- > >> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org > >> To subscribe, unsubscribe, or to change your mail settings: > >> http://lists.phxlinux.org/mailman/listinfo/plug-discuss > > > > --- > > PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org > > To subscribe, unsubscribe, or to change your mail settings: > > http://lists.phxlinux.org/mailman/listinfo/plug-discuss > --- > PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org > To subscribe, unsubscribe, or to change your mail settings: > http://lists.phxlinux.org/mailman/listinfo/plug-discuss > --- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss
Re: Ransom Virus
I agree, I'm a Mac user with my IMac, IPad, and IPhone. I use a windows laptop for teaching classes using PowerPoint presentations. And I agree you can't backup often enough. Sent from my iPad > On Jun 19, 2014, at 10:25 PM, Eric Oyen wrote: > > well, I wish your friend a lot of luck. The encryption is very difficult to > break and would likely take longer than its worth. > > This is why I strongly recommend daily backups of important data. I have > already seen this on my windows laptop. Fortunately, I had already made a > backup of the entire system. So, It was easy for me to erase using a Linux > rescue disk and then put the old OS back in place. THe only reason for me to > have windows at all around here is for some of the windows specific > applications that are able to be used with JAWS (screen reader for the > blind). All the rest of the time I spend on either the Linux partition on > this mac, or OS X (where I do all my mail). > > So, there you have the lesson. Backup, backup, and more backup (even make a > backp of the backup). > > -eric > >> On Jun 19, 2014, at 7:19 PM, Ralph Prowell wrote: >> >> Just recently a friend of mine opened an outlook message that asked her to >> download a program that turned out to be a ransom virus and has encrypted >> all of her Microsoft office files and are wanting her to pay a ransom of >> $500 to get her files back. >> >> Has anyone had any success in retrieving these ransom files from an infected >> machine? If so please contact me if you have any ideas how to retrieve >> these files. >> >> Thank you, >> Ralph >> >> Sent from my iPad >> --- >> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org >> To subscribe, unsubscribe, or to change your mail settings: >> http://lists.phxlinux.org/mailman/listinfo/plug-discuss > > --- > PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org > To subscribe, unsubscribe, or to change your mail settings: > http://lists.phxlinux.org/mailman/listinfo/plug-discuss --- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss
Re: Ransom Virus
well, I wish your friend a lot of luck. The encryption is very difficult to break and would likely take longer than its worth. This is why I strongly recommend daily backups of important data. I have already seen this on my windows laptop. Fortunately, I had already made a backup of the entire system. So, It was easy for me to erase using a Linux rescue disk and then put the old OS back in place. THe only reason for me to have windows at all around here is for some of the windows specific applications that are able to be used with JAWS (screen reader for the blind). All the rest of the time I spend on either the Linux partition on this mac, or OS X (where I do all my mail). So, there you have the lesson. Backup, backup, and more backup (even make a backp of the backup). -eric On Jun 19, 2014, at 7:19 PM, Ralph Prowell wrote: > Just recently a friend of mine opened an outlook message that asked her to > download a program that turned out to be a ransom virus and has encrypted all > of her Microsoft office files and are wanting her to pay a ransom of $500 to > get her files back. > > Has anyone had any success in retrieving these ransom files from an infected > machine? If so please contact me if you have any ideas how to retrieve these > files. > > Thank you, > Ralph > > Sent from my iPad > --- > PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org > To subscribe, unsubscribe, or to change your mail settings: > http://lists.phxlinux.org/mailman/listinfo/plug-discuss --- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss
Re: Ransom Virus
No the only infections I've heard of come from windows users. Ralph Sent from my iPad > On Jun 19, 2014, at 9:34 PM, Harold wrote: > > > Is there any record of the ransom virus on a Linux system? > > Harold > >> On 06/19/2014 07:31 PM, sean wrote: >> I've only heard success stories (if you can even call it that). The code >> can't be cryptographically cracked and it's been difficult to track the >> authors. There were some leads for one group a week ago or so, but I haven't >> followed it. It's a pretty lousy situation. >> >>> On Jun 19, 2014 7:26 PM, "Ralph Prowell" wrote: >>> I've heard from a friend that talked to someone that paid the ransom and >>> they couldn't decrypt the files and he lost the files and lost the money. >>> Is anyone working on trying to either catch these crooks or trying to crack >>> their code? >>> >>> Ralph >>> >>> Sent from my iPad >>> >>> On Jun 19, 2014, at 9:20 PM, sean wrote: >>> >>>> You have to pay or restore from a backup. You can't beat the encryption. >>>> >>>>> On Jun 19, 2014 7:19 PM, "Ralph Prowell" wrote: >>>>> Just recently a friend of mine opened an outlook message that asked her >>>>> to download a program that turned out to be a ransom virus and has >>>>> encrypted all of her Microsoft office files and are wanting her to pay a >>>>> ransom of $500 to get her files back. >>>>> >>>>> Has anyone had any success in retrieving these ransom files from an >>>>> infected machine? If so please contact me if you have any ideas how to >>>>> retrieve these files. >>>>> >>>>> Thank you, >>>>> Ralph >>>>> >>>>> Sent from my iPad >>>>> --- >>>>> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org >>>>> To subscribe, unsubscribe, or to change your mail settings: >>>>> http://lists.phxlinux.org/mailman/listinfo/plug-discuss >>>> --- >>>> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org >>>> To subscribe, unsubscribe, or to change your mail settings: >>>> http://lists.phxlinux.org/mailman/listinfo/plug-discuss >>> >>> --- >>> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org >>> To subscribe, unsubscribe, or to change your mail settings: >>> http://lists.phxlinux.org/mailman/listinfo/plug-discuss >> >> >> --- >> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org >> To subscribe, unsubscribe, or to change your mail settings: >> http://lists.phxlinux.org/mailman/listinfo/plug-discuss > > --- > PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org > To subscribe, unsubscribe, or to change your mail settings: > http://lists.phxlinux.org/mailman/listinfo/plug-discuss --- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss
Re: Ransom Virus
Is there any record of the ransom virus on a Linux system?
Harold
On 06/19/2014 07:31 PM, sean wrote:
I've only heard success stories (if you can even call it that). The
code can't be cryptographically cracked and it's been difficult to
track the authors. There were some leads for one group a week ago or
so, but I haven't followed it. It's a pretty lousy situation.
On Jun 19, 2014 7:26 PM, "Ralph Prowell" <mailto:rprow...@gmail.com>> wrote:
I've heard from a friend that talked to someone that paid the
ransom and they couldn't decrypt the files and he lost the files
and lost the money. Is anyone working on trying to either catch
these crooks or trying to crack their code?
Ralph
Sent from my iPad
On Jun 19, 2014, at 9:20 PM, sean mailto:sean.a.ritz...@gmail.com>> wrote:
You have to pay or restore from a backup. You can't beat the
encryption.
On Jun 19, 2014 7:19 PM, "Ralph Prowell" mailto:rprow...@gmail.com>> wrote:
Just recently a friend of mine opened an outlook message that
asked her to download a program that turned out to be a
ransom virus and has encrypted all of her Microsoft office
files and are wanting her to pay a ransom of $500 to get her
files back.
Has anyone had any success in retrieving these ransom files
from an infected machine? If so please contact me if you
have any ideas how to retrieve these files.
Thank you,
Ralph
Sent from my iPad
---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
<mailto:PLUG-discuss@lists.phxlinux.org>
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss
---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
<mailto:PLUG-discuss@lists.phxlinux.org>
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss
---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
<mailto:PLUG-discuss@lists.phxlinux.org>
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss
---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss
---
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss
Re: Ransom Virus
I've only heard success stories (if you can even call it that). The code can't be cryptographically cracked and it's been difficult to track the authors. There were some leads for one group a week ago or so, but I haven't followed it. It's a pretty lousy situation. On Jun 19, 2014 7:26 PM, "Ralph Prowell" wrote: > I've heard from a friend that talked to someone that paid the ransom and > they couldn't decrypt the files and he lost the files and lost the money. > Is anyone working on trying to either catch these crooks or trying to > crack their code? > > Ralph > > Sent from my iPad > > On Jun 19, 2014, at 9:20 PM, sean wrote: > > You have to pay or restore from a backup. You can't beat the encryption. > On Jun 19, 2014 7:19 PM, "Ralph Prowell" wrote: > >> Just recently a friend of mine opened an outlook message that asked her >> to download a program that turned out to be a ransom virus and has >> encrypted all of her Microsoft office files and are wanting her to pay a >> ransom of $500 to get her files back. >> >> Has anyone had any success in retrieving these ransom files from an >> infected machine? If so please contact me if you have any ideas how to >> retrieve these files. >> >> Thank you, >> Ralph >> >> Sent from my iPad >> --- >> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org >> To subscribe, unsubscribe, or to change your mail settings: >> http://lists.phxlinux.org/mailman/listinfo/plug-discuss >> > --- > PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org > To subscribe, unsubscribe, or to change your mail settings: > http://lists.phxlinux.org/mailman/listinfo/plug-discuss > > > --- > PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org > To subscribe, unsubscribe, or to change your mail settings: > http://lists.phxlinux.org/mailman/listinfo/plug-discuss > --- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss
Re: Ransom Virus
I've heard from a friend that talked to someone that paid the ransom and they couldn't decrypt the files and he lost the files and lost the money. Is anyone working on trying to either catch these crooks or trying to crack their code? Ralph Sent from my iPad > On Jun 19, 2014, at 9:20 PM, sean wrote: > > You have to pay or restore from a backup. You can't beat the encryption. > >> On Jun 19, 2014 7:19 PM, "Ralph Prowell" wrote: >> Just recently a friend of mine opened an outlook message that asked her to >> download a program that turned out to be a ransom virus and has encrypted >> all of her Microsoft office files and are wanting her to pay a ransom of >> $500 to get her files back. >> >> Has anyone had any success in retrieving these ransom files from an infected >> machine? If so please contact me if you have any ideas how to retrieve >> these files. >> >> Thank you, >> Ralph >> >> Sent from my iPad >> --- >> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org >> To subscribe, unsubscribe, or to change your mail settings: >> http://lists.phxlinux.org/mailman/listinfo/plug-discuss > --- > PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org > To subscribe, unsubscribe, or to change your mail settings: > http://lists.phxlinux.org/mailman/listinfo/plug-discuss --- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss
Re: Ransom Virus
You have to pay or restore from a backup. You can't beat the encryption. On Jun 19, 2014 7:19 PM, "Ralph Prowell" wrote: > Just recently a friend of mine opened an outlook message that asked her to > download a program that turned out to be a ransom virus and has encrypted > all of her Microsoft office files and are wanting her to pay a ransom of > $500 to get her files back. > > Has anyone had any success in retrieving these ransom files from an > infected machine? If so please contact me if you have any ideas how to > retrieve these files. > > Thank you, > Ralph > > Sent from my iPad > --- > PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org > To subscribe, unsubscribe, or to change your mail settings: > http://lists.phxlinux.org/mailman/listinfo/plug-discuss > --- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss
Ransom Virus
Just recently a friend of mine opened an outlook message that asked her to download a program that turned out to be a ransom virus and has encrypted all of her Microsoft office files and are wanting her to pay a ransom of $500 to get her files back. Has anyone had any success in retrieving these ransom files from an infected machine? If so please contact me if you have any ideas how to retrieve these files. Thank you, Ralph Sent from my iPad --- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss
