Jump to content
MSFN is made available via donations, subscriptions and advertising revenue. The use of ad-blocking software hurts the site. Please disable ad-blocking software or set an exception for MSFN. ×

Cryptovirus defenses?


phaolo
 Share

Recommended Posts

passwords and limited accounts won't help

when crafted smart, any malware can login as SYSTEM which overrides both UAC and your ... whatever account protected thing :P

Link to comment
Share on other sites


1 hour ago, vinifera said:

passwords and limited accounts won't help

when crafted smart, any malware can login as SYSTEM which overrides both UAC and your ... whatever account protected thing :P

Man some of them  are prevented

Link to comment
Share on other sites

  • 2 weeks later...

Do ransomware infectors use system-level file-encryption services?  Services that wouldn't be available on win-9x/me?

Does your file system need to be NTFS in order for a ransomware infector to be successful?

I thought I read somewhere that these infectors use their own custom routine to open target files and encrypt the first 32kb of the target file.  That means the encryption can happen fast, and be independent on the file size (even large multi-media files need not be fully read and re-written in encrypted format).  Do we know what is really going on when Locky and other ransomware infectors are messing with files?


 

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.

×
×
  • Create New...