Re: Ransomware at client

[ Follow Ups ] [ Post Followup ] [ Signature.net Forum ]

Posted by Tom Fulton on October 10, 2017 at 11:24:56:

In Reply to: Re: Ransomware at client posted by Barbara Brazil on October 10, 2017 at 10:30:23:

Five hours later end-user is back in business. Interesting that this version picks out QDIR.DIR for encryption. Particularly in light of the fact that I found a couple of files that should have been encrypted but were not,
TOMFILE.TXT and BCFILE.DOC I believe they were not encrypted becauase they were testing for ".txt" and for ".doc" and skipped the upper case. But that wouldn't explain the QDIR.DIR Strange.

Follow Ups:


Post a Followup

Name:
E-Mail:

Subject:

What is the name of the main Signature System's Product?  

Comments:

Optional Link URL:
Link Title:
Optional Image URL:

You may attach up to 5 files to your followup (see below):





Each file can be a maximum of 1MB in length Uploaded files will be purged from the server on a regular basis.

[ Follow Ups ] [ Post Followup ] [ Signature.net Forum ]