The Rolex Forums   The Rolex Watch

ROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEX

Old 28 February 2015, 09:38 AM   #1
southtexas
2024 ROLEX SUBMARINER 41 Pledge Member
 
southtexas's Avatar
 
Join Date: May 2011
Location: Great State of TX
Posts: 5,764
Crypto Wall 3.0

Today my secretary was attempting to open a file and noticed it wouldn't open, and was replaced with "help decrypt.txt, .url, etc". She looked into every folder, and every file in every folder she looked at shows same.

It is crypto wall 3.0. It exports and encrypts your files, then gives you 7 days to pay $500 in Bitcoin to receive a key to unlock it.

Has anyone gotten this? If yes, did they pay AND get their files back? Apparently, this new version was first seen mid-Jan 2015. Any input is greatly appreciated.


Sent from my iPhone using Tapatalk
__________________
Forty six & 2 are just ahead of me.

Follow me on Instagram @ccrolex
southtexas is offline   Reply With Quote
Old 28 February 2015, 09:40 AM   #2
cop414
TRF Moderator & 2024 SubLV41 Patron
 
cop414's Avatar
 
Join Date: Apr 2012
Real Name: Tim
Location: Pennsylvania
Watch: 14060M
Posts: 72,258
Never heard of it Robby,,,?
__________________

Rolex Submariner 14060M
Omega Seamaster 2254.50
DOXA Professional 1200T

Card carrying member of TRF's Global Association of Retro-Grouch-Curmudgeons
TRF's "After Dark" Bar & NightClub Patron
P Club Member #17
2 FA ENABLED
cop414 is offline   Reply With Quote
Old 28 February 2015, 09:41 AM   #3
jolimont
"TRF" Member
 
jolimont's Avatar
 
Join Date: Jan 2012
Real Name: Will
Location: land of oz
Watch: sundial
Posts: 2,219
http://en.wikipedia.org/wiki/Ransomware

best of luck with that

hope you backed up your files
jolimont is offline   Reply With Quote
Old 28 February 2015, 10:04 AM   #4
linesiders
2024 SubLV41 Pledge Member
 
linesiders's Avatar
 
Join Date: Dec 2011
Location: RedSox Nation
Watch: U Talkn Bout Wilis
Posts: 5,503
Backup your files, daily, to encrypted image based backup located onsite and offsite. Look in to your local IT support providers, I highly recommend ShadowProtect combined with a Datto for desktops / small shops or an Alto/Siris for big shops.

You can wipe the computer and restore your files. 2 things happen with this, one is that they can get your files.

In order for this scam to work, they do give you the capability to get you files back - AFTER you pay but then you really cannot trust it - can you.

You also should run your email through a quality 3rd party scanning engine.

I had a previous version of this hit a client of mine over a year ago, I had just implemented a Siris device. Saved missions of dollars worth of data.
__________________
I'm a sailor peg. And I've lost my leg. Climbing up the top sails. I've lost my leg!
linesiders is offline   Reply With Quote
Old 28 February 2015, 10:49 AM   #5
southtexas
2024 ROLEX SUBMARINER 41 Pledge Member
 
southtexas's Avatar
 
Join Date: May 2011
Location: Great State of TX
Posts: 5,764
John can you call me? I just PMd you my number.


Sent from my iPhone using Tapatalk
__________________
Forty six & 2 are just ahead of me.

Follow me on Instagram @ccrolex
southtexas is offline   Reply With Quote
Old 28 February 2015, 12:48 PM   #6
77T
2024 SubLV41 Pledge Member
 
77T's Avatar
 
Join Date: Dec 2010
Real Name: PaulG
Location: Georgia
Posts: 42,024
Much luck with this and please let us know how it works out. If you have an "off line" backup of your data then you will only lose the applications when you wipe the machine clean and re-image it.
__________________


Does anyone really know what time it is?
77T is offline   Reply With Quote
Old 28 February 2015, 01:12 PM   #7
seand442
"TRF" Member
 
seand442's Avatar
 
Join Date: Apr 2007
Location: Earth
Watch: 116610
Posts: 3,455
Good luck. I haven't heard of a good ending from ransom ware. Here is where a police department actually payed the ransom.

http://arstechnica.com/tech-policy/2...omware-scheme/
__________________
NEVER ARGUE WITH AN IDIOT. FIRST THEY WILL DRAG YOU DOWN TO THEIR LEVEL. THEN, THEY WILL BEAT YOU WITH EXPERIENCE.
seand442 is offline   Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

OCWatches

Wrist Aficionado

My Watch LLC

WatchesOff5th

DavidSW Watches

Takuya Watches


*Banners Of The Month*
This space is provided to horological resources.





Copyright ©2004-2024, The Rolex Forums. All Rights Reserved.

ROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEX

Rolex is a registered trademark of ROLEX USA. The Rolex Forums is not affiliated with ROLEX USA in any way.