Quads
Malware Removalists
In New Zealand
Posts: 9,387
|
Post by Quads on Apr 6, 2014 18:03:18 GMT -8
|
|
|
|
Post by maldemarstor on Apr 21, 2014 6:59:00 GMT -8
Is there a way to counter cryptolocker or are you pretty much done if someone targets you?
|
|
Quads
Malware Removalists
In New Zealand
Posts: 9,387
|
Post by Quads on Apr 21, 2014 10:48:49 GMT -8
There is a little Program called HitmanPro.Alert (that is not Hitmampro, that is not free) the little program runs in the background mostly silently without the user noticing. It has CryptoGuard which monitors the system for any attempt on your personal files being encrypted and blocks the likes of Cryptolocker and CryptoDefence from encrypt your files, then alerts the user that a file (********.exe) is attacking your files. and has been blocked from doing so. Please have HitmanPro (or any program or help you like by clicking the close button) As it does not block the file(s) just blocks the encrypting so your files like docs and photo etc. don't get encrypted, thus ransomed. It is still a good idea that a backup of personal files on large flash drive or portable hard drive is not connected to the computer when a backup is not being done as the likes of Cryptolocker also scans any drive connected and encrypts personal files on those drives to. www.surfright.nl/en/cryptoguardQuads |
|
dmerk
New Helpee
Posts: 45 
|
Post by dmerk on May 29, 2014 16:28:55 GMT -8
So, if you have HitmanPro.Alert and HitmanPro, the ransomware would have been removed? No need for all the scans and running of custom scripts? Also, it suggested HitmanPro w/ Kickstart if your system is locked. How come Kickstart did not work for the laptop?
|
|
Quads
Malware Removalists
In New Zealand
Posts: 9,387
|
Post by Quads on May 29, 2014 16:59:32 GMT -8
HitmanPro.Alert is just a blocker basically, so that even if the Ransomcrypt files startup and run the encrypting of personal files is blocked, ICE is a Ransomlock not a Ransomcrypt, Ransomcrypt's encrypt personal files (docs, photo /pics, music, video...........etc.) so that if the encryption is really good your files are gone unless
a) you pay the bad guys
b) remove the Ransomcrypt and then restore your personal file from a backup.
HitmanPro.Alert is not an AV and runs quietly in the background with the AV, Like Norton, Kaspersky, Avast, AVG, McAfee and so on. When the RansomCrypt is able to run as it has not been detected by AV's including HitmanPro. HitmanPro.Alert detects the attempt of encryption and tell the user to gave a file removed, Even Hitman Pro fails if something new or a new variant, they all do.
The user can click the close button for the warning and then instead get help and have MR's use advanced tools to log, find snd script to break and remove the Ransomcrypt while this is going on HitmanPro.Alert does its job in protecting personal files.
RansomLock Vs RansomCrypt, They are different.
Quads
|
|
dmerk
New Helpee
Posts: 45
|
Post by dmerk on May 29, 2014 17:27:22 GMT -8
Right I understand the role and use for just Hitman.Alert. Was just unsure if the HitmanPro could have removed ICE had Hitman.ALERT warned USER. But from what you explained to me about RansomCrypt and RansomLock, Hitman.Alert would not work for ICE, Am I correct? I did not know there were such...malware/viruses like this. I am sure it goes much deeper and technical then this.
What AV program do you recommend and why
|
|
