Page 2 of 2 FirstFirst 12

  1. Joined : Apr 2015
    Posts : 9,159
       12 Dec 2015 #11

    The CryptoWall v4 is sneaky now, in that, after deleting the original file, it puts the new, encrypted file in the exact sector where the original was deleted. This makes it very difficult to recover the original deleted file.

    Interestingly, there appear to be certain regions where it does not wish to attack, and if it detects these languages, it will not infect the computer: Russian, Kazakh, Ukrainian, Uzbek, Belarusian, Azeri, Armenian, Kyrgyz, Georgian.

    It is also using drive-by-download techniques and the Angler Exploit Kit, which means that you can be infected simply by visiting an infected website; malicious code is executed via hidden iFrame(s) after identifying unpatched programs/browsers/add-ons, and injected into svchost.exe, bypassing the UAC when deleting all Shadow Copies if you are using an account with administrative privileges, and thus tricking many AVs in the process.

    ref: Security Alert: Angler Exploit Kit Spreads CryptoWall 4.0 via New Drive-By Campaign - Heimdal Security Blog

    ref: Cisco Talos Blog: Threat Spotlight: CryptoWall 4 - The Evolution Continues
      My System SpecsSystem Spec

  2. Joined : Jul 2015
    Posts : 734
    Windows 10 Home x64
       12 Dec 2015 #12

    Thanks for the info simrick.
      My System SpecsSystem Spec

  3. Joined : Apr 2015
    Posts : 9,159
       12 Dec 2015 #13

    eLPuSHeR said: View Post
    Thanks for the info simrick.
      My System SpecsSystem Spec

Page 2 of 2 FirstFirst 12

Similar Threads
Thread Forum
recover deleted files
Hello, I realise this problem would be similar regardless of which Windows being used. I partitioned my HD and moved documents to new partition. Mistakenly removed the partition without restoring files. Is there any way of recovering the lost...
General Support
How do I recover my deleted files after upgrading to Windows 10?
Hi guys, I was using Windows 8.1 then upgraded to Windows 10, but all of my personal files has deleted and I tried best of recovery programs and they're not helped me. So, if I roll back to my previous version of Windows, does my personal files...
General Support
Trying to Recover files. I can see them but not find them.
I was looking for a forum for OneDrive but don't see one... Sorry; I'm new around here! I had a computer completely die (won't boot, Hard Drive won't spin). I have a backup from April but would like to find newer the files if I can! I had...
General Support
Is it Possible to Recover Files from Windows 8->8->10?
Hi, My boyfriend was running a bootlegged version of Windows 8. I reinstalled his Windows to a legitimate version of Windows 8 so that he could get the free upgrade upgrade to Windows 10. When we went from Windows 8-->Windows 8, the only...
Performance & Maintenance
Recover personal files from hard drive using USB enclosure.
My friend has been using AutoCAD on fairly new Windows 10 install. No problems till today when he got an error stating he needed to reinstall the OS. I didn't see the error before he shut down. To be safe he pulled his hard drive and asked me to...
General Support
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 11:31.
Find Us
Twitter Facebook Google+

Windows 10 Forums