New Satana ransomware encrypts user files and master boot record


  1. Posts : 39,789
    Win 7 32, Win 7 64 Pro, Win 8.1 64 Pro, Win 10 64 Education Edition, Win 11 Pro
       #1

    New Satana ransomware encrypts user files and master boot record


    And the news just keeps getting better . Take the time to make back ups & system images.

    System Image - Create in Windows 10 - Windows 10 Forums

    Attackers are developing an aggressive new ransomware program for Windows machines that encrypts user files as well as the computer's master boot record (MBR), leaving devices unable to load the OS.

    The program is dubbed Satana -- meaning "Satan" in Italian and Romanian -- and, according to researchers from security firm Malwarebytes, it is functional but still under development.
    Users might be able to repair the MBR by using the Windows recovery options, but this requires working with the Windows command line and the bootrec.exe (boot recovery) tool, so it is likely beyond the abilities of typical users.

    The current version of Satana hasn’t yet been widely distributed, and the researchers don’t expect that it will because the code is not yet mature and has flaws. However, they believe this version will likely serve as a base for future improvements.
    New Satana ransomware encrypts user files and master boot record | PCWorld
      My Computer


  2. Posts : 27,166
    Win11 Pro, Win10 Pro N, Win10 Home, Windows 8.1 Pro, Ubuntu
       #2

    And this is why an OFFLINE(external disk stored in the closet, not just turned off, but unplugged) is so important.
    I do weekly('s enuff 4 me:)) to my 2nd internal, fo incase I mess up something, but, once a month, or so., I update my offline disk. I set it up, let Macrium run and image all 3 internal(for partitioning look at my specs) while I shave, shower, go shopping and eat dinner. I even image my weekly image partition(that's why it takes half a day, it needs to open the compressed files to read them).

    Respect, I gotta hand it to them, encrypting the MBR... and Windows or any PE environment doesn't know where anything is .
      My Computers


  3. Posts : 636
    Windows 10 PRO 64Bit
       #3

    A neighbour (a retired 95 year old navy Chaplin) showed me his tablet which he could not shut and it showed a webpage from the cyberpolice demanding $200 or else. I managed to get to shut down but when it rebooted that webpage came up immediately. He took it to a local Geek Squad and they managed to reset it to factory defaults for only $210. Not quite sure now who the crooks are!

    I keep an offline hard drive with a copy of my system and it is the best protection. My only problem is keeping it current.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 05:42.
Find Us




Windows 10 Forums