A group called Malware Must Die have just reported they have successfully identified and suspended 138 Cryptolocker Command and Control (C&C) servers. This is wonderful news but is surely just a drop in the ocean but there could be other ramifications with this for those people already infected with Cryptolocker.
The way Cryptolocker works is by encrypting your files using a public and private key. The public key is on your computer and the private key is held elsewhere. In this case on a C&C server. Once this process is complete, it then tells you you're infected and currently, the ONLY way you can get your files back is by paying the 'ransom' displayed on your screen before the countdown timer gets to zero. This 'ransom' could be anything upwards of $300.
But what if your private key is on one of the C&C servers suspended by Malware Must Die? Quite simply, I believe your files are toast because your computer cannot communicate with the C&C server to retrieve the private key and decrypt your files.
Don't think this will never happen to you. It has hit BIG companies and private individuals alike, all who believed they were immune to such attacks, or didn't think they had anything worth bothering about. How wrong they ALL were.
Now if you haven't done so already, get your files backed up off your computer. If you back up to a USB drive, make sure it's totally disconnected from the computer between backups and don't try backing up if you find yourself infected with Cryptolocker unless you want to lose the lot.
How do you back up?
You could use the Windows Backup and Restore option if you wish, or just follow the instructions below.
First, make sure all your files are where they should be - somewhere in your 'My Documents' folder (Win XP) of somewhere in your 'Libraries' folder (Vista/7/8) and not on your desktop like I see all too often.
Then all you need to do is copy the 'My Documents/Libraries' folder to the external drive.
Keep safe!
The way Cryptolocker works is by encrypting your files using a public and private key. The public key is on your computer and the private key is held elsewhere. In this case on a C&C server. Once this process is complete, it then tells you you're infected and currently, the ONLY way you can get your files back is by paying the 'ransom' displayed on your screen before the countdown timer gets to zero. This 'ransom' could be anything upwards of $300.
But what if your private key is on one of the C&C servers suspended by Malware Must Die? Quite simply, I believe your files are toast because your computer cannot communicate with the C&C server to retrieve the private key and decrypt your files.
Don't think this will never happen to you. It has hit BIG companies and private individuals alike, all who believed they were immune to such attacks, or didn't think they had anything worth bothering about. How wrong they ALL were.
Now if you haven't done so already, get your files backed up off your computer. If you back up to a USB drive, make sure it's totally disconnected from the computer between backups and don't try backing up if you find yourself infected with Cryptolocker unless you want to lose the lot.
How do you back up?
You could use the Windows Backup and Restore option if you wish, or just follow the instructions below.
First, make sure all your files are where they should be - somewhere in your 'My Documents' folder (Win XP) of somewhere in your 'Libraries' folder (Vista/7/8) and not on your desktop like I see all too often.
Then all you need to do is copy the 'My Documents/Libraries' folder to the external drive.
Keep safe!
RSS Feed
