Tuesday, May 16, 2017

Ransomware: Infected with Locky - what to do?

So far, there is no key for Locky, the security manufacturers are always cracking blackjacks, recently, e.g. Teslaycrpyt 2, but Locky is a hard nut because of its modern crypto infrastructure.


1. Numbers or not?


Paying is the worse choice because it is likely that you get the key but not always secure. In addition there were already cases (but not in connection with Locky), in which the blackmailer after the first payment demanded an additional demand. If you can handle the loss of the data because A relatively fresh backup, so do not pay!


2. Anti-Locky-Stick


All popular AV programs block Locky effectively. The Kaspersky Rescue Disk can be used to remotely remotely the Kaspersky Rescue Disk. The Kaspersky-ISO tool allows you to create a bootable Anti-Locky-Stick from the Kaspersky-ISO.


Not a bad solution is to format the computer completely after an attack. This will make sure you remove all remnants of the pest. If you have an image of a clean system, you can also restore it, or reset the original settings to Windows from version 8.


3. Canceling encrypted data


There is a chance that Security Specialists Locky will crack at some point or that the police take the blackmail band and publish the keys. So keep the encrypted data.


In the future, make a backup on a regular basis, preferably on an external medium that you can disconnect from the computer after each backup.


4. Create backup

No comments:

Post a Comment