Clive Gray Enterprises
  • Welcome
  • Contact Us
  • Blog
  • Testimonials

Cryptolocker copycat

1/15/2014

2 Comments

 
A new malware is out pretending to be part of CryptoLocker and using the same name in its lockscreen. This one displays a lock screen before you can access your desktop, blocks you from running any programs, and displays a box stating that you must fill out a survey in order to unlock your computer. It does not appear to encrypt any files and only blocks you from accessing your desktop. This is not a very professional looking malware, is coded in Visual Basic, and is probably the creation of a script kiddy. This malware was first reported here:

https://forums.malwarebytes.org/index.php?showtopic=140110

The text of the screenlocker is:

CRYPTOLOCKER WARNING

Your computer has been locked and all your files are encrypted with 2048-bit RSA encryption. In order to unlock your computer and files you need to fill out a survey.

You must use only REAL information while filling a survey (name, surname, address, phone number...). SMS mobile phone surveys unlock faster.

After completing a survey, you will download a txt file containing the needed code to unlock your computer and files.

Once the right key is entered, this message will disappear forever, your computer and files will be unlocked.

At the end there is an Open Survey button that brings you to a page hosted at totally-legit.biz. This page contains javascript to show you a survey widget from sharecash.org. Sharecash.org offers a survey widget that developers can use to unlock programs they offer if someone fills in the survey.

Do not worry, this one can be removed and it does not appear to encrypt your files.
2 Comments
SuanKai
2/20/2014 12:08:25 am

How can 1 remove this then? Need a reply A.S.A.P. Thx,

Reply
Clive Gray link
2/20/2014 06:07:55 am

This forum discusses Cryptorbit and its' variants and offers solutions.

http://www.bleepingcomputer.com/forums/t/517689/howdecrypt-or-cryptorbit-encrypting-ransomware-500-usd-ransom-topic/

Reply



Leave a Reply.

    Author

    My name is Clive Gray, using the trading style Clive Gray Computers. I'll be jotting down thoughts and snippets as time permits.
    I am not responsible for the content of replies posted in response to my articles, they are the views of the poster and last time I checked, we still have the right of free speech.
    When replying to a post, please ensure it's relevant to the subject or it may be moved or deleted.
    Thank you.

    Archives

    June 2017
    January 2017
    December 2016
    September 2016
    August 2016
    June 2016
    May 2016
    November 2015
    September 2015
    August 2015
    May 2015
    April 2015
    March 2015
    February 2015
    January 2015
    December 2014
    November 2014
    July 2014
    June 2014
    May 2014
    April 2014
    February 2014
    January 2014
    December 2013
    November 2013
    October 2013
    September 2013
    August 2013
    July 2013
    June 2013
    April 2013
    March 2013
    February 2013
    January 2013
    October 2012
    September 2012
    August 2012
    July 2012
    June 2012
    May 2012
    April 2012
    February 2012
    January 2012
    December 2011
    November 2011
    October 2011
    September 2011

    Categories

    All
    5 Inch
    7 Inch
    Accident
    Airbox
    Android
    Apple
    Avanti
    Backup
    Bitcoins
    Blackberry
    Black Box
    Broadband
    BT
    Car
    Cctv
    ComEnersol
    Communicaciones Enersol
    Computer
    Connecta3
    Cryptolocker
    CVADY-I477
    Dvr
    Eastman
    Email
    Enersol
    Europa
    Europasat
    Facebook
    Film
    Flashback
    Free
    Friends
    Gps
    Hacking
    Holiday
    Honesty
    Htc
    Hylas
    Hylas Broadband
    Internet
    Internet Explorer
    Ipad
    IP Camera
    Iphone
    Iptv
    Kodak
    Laptop
    Lg
    Linux
    Mac
    Malware
    Messenger
    Microsoft
    Mobile Phone
    Mobile Phones
    Nokia
    Password
    Pc
    Phone Call
    Phones
    Photography
    Plusnet
    Printers
    Problems
    Raspberry Pi
    Recorder
    Safety
    Samsung
    Santa Pola Cable
    Satellite
    Satellite Internet
    Satnav
    Scam
    Second Hand
    Security
    Seo
    Ses
    Sim Cards
    Sky
    Skype
    Sony
    Spantel
    Tablet
    Talktalk
    Telecable
    Telefonica
    Telephone
    Thl
    Tooway
    Tooway Problems
    Tracker
    Trojan
    Tv
    Ubuntu
    Uk Internet
    Update
    Video
    Virgin Media
    Virus
    Voip
    Watch
    Website
    Windows
    Windows 10
    Windows 7
    Windows 8
    Windows Vista
    Windows Xp

    RSS Feed

Powered by Create your own unique website with customizable templates.