A few simple tips on computer security

[Dominix_]

Get the lowdown on the RedBoot ransomware that prevents a host system from booting and additionally encrypts files, speckling them with the .locked extension.

Blackmail viruses like RedBoot have evoked a serious discussion in the IT security circles. These types of cyber-culprits cause much more damage than mainstream ransomware as their adverse effects go beyond personal data encryption alone. The above-mentioned infection, for instance, additionally corrupts the Master Boot Record and skews the partition table to render the machine inoperable. Some researchers argue that perpetrating programs with such a depth of impact make victims highly skeptical regarding their chances for recovery, hence the crooks earn less than they would if the pest simply enciphered files without blocking computers altogether. And yet, the makers of RedBoot don’t seem to care and keep spreading their Petya-ish baddie regardless.
In other words, the victim is instructed to contact the threat actors at [email protected], and will then supposedly receive a walkthrough to unlock the PC and decrypt files with the .locked extension. A big caveat to recovery, though, is that there is no way to enter the unlock key, which suggests that RedBoot is either too crude at this point, or it’s a data wiper that shouldn’t provide any restoration options in the first place. One way or another, the fix should start with creating and using a bootable rescue CD or USB so that the system actually loads. Stick with the procedure below to do the rest of the fix.

 

[Dominix_]

Ransomware Prevention Tips
To avoid RedBoot ransomware and other file-encrypting infections in the future, follow several simple recommendations:

• Toggle your email provider’s anti-spam settings to filter out all the potentially harmful incoming messages. Raising the bar beyond the default protection is an important countermeasure for ransom Trojans.
• Define specific file extension restrictions in your email system. Make sure that attachments with the following extensions are blacklisted: .js, .vbs, .docm, .hta, .exe, .cmd, .scr, and .bat. Also, treat ZIP archives in received messages with extreme caution.
• Rename the vssadmin.exe process so that ransomware is unable to obliterate all Shadow Volume Copies of your files in one shot.
• Keep your Firewall active at all times. It can prevent crypto ransomware from communicating with its C&C server. This way, the threat won’t be able to obtain cryptographic keys and lock your files.
• Back up your files regularly, at least the most important ones. This recommendation is self-explanatory. A ransomware attack isn’t an issue as long as you keep unaffected copies of your data in a safe place.
• Use an effective antimalware suite. There are security tools that identify ransomware-specific behavior and block the infection before it can do any harm.

These techniques are certainly not a cure-all, but they will add an extra layer of ransomware protection to your security setup.
http://myspybot.com/redboot-ransomware/

 

[Corzhens]

Thank you for the added information on computer security. It is always my concern for our home computers that's why I always remind my family to be discrete and discerning in going to new sites. Much more, the anti virus should also be up to date to combat new viruses.