November 2010 - Computer Troubleshooters franchisees have reported seeing computers at the mercy of the latest virus, which holds your information to ransom.
The symptoms include your computer’s desktop turning white with the
following message:
Attention!!!! All your personal files were encrypted with a
strong algorythm RSA-1024 and you can’t get an access to them
without making of what we need!
Read ‘How to decrypt’ txt-file on your desktop for details Just do
it as fast as you can!
Remember: Don’t try to tell someone about this message if you want
to get your files back! Just do all we told.
The virus ‘Trojan.Ransom-U’ does indeed encrypt your files and tells you to wire transfer $120 and email datafinder@fastmail.fm for a fix. It also threatens to delete your files permanently if you seek outside help. The ransom note is contained in the How to decrypt files.txt file on your desktop.
Your virus scanning software may detect a strangley named executable file (.exe), where the name is a random string of numbers and/or letters.
At the time of writing (Nov 29 2010 AEST), there is no known way to clean or un-encrypt your files. The only recovery steps are to turn off Windows System Restore, scan and clean your computer in safe mode and restore your files from your last known-working backup.
If you haven't been hit by this virus now might be a good time to
-
check your antivirus is up-to-date
-
check windows is up-to-date
-
check adobe reader is up-to-date
-
Also, take the time to confirm that your computer's backup is working correctly, as restoring your files from your backup may be your only option to recover from Ransom-U.
If you have any questions feel free to give us a call (0427 272 609)
