1. Joined : Oct 2014
    In a house with a crazy cat trying to kill me
    Posts : 11,449
    Win 7 32, Win 7 64 Pro, Win 8.1 64 Pro, Win 10 64 Education Edition
       04 Jul 2016 #1

    New Satana ransomware encrypts user files and master boot record


    And the news just keeps getting better . Take the time to make back ups & system images.

    System Image - Create in Windows 10 - Windows 10 Forums

    Attackers are developing an aggressive new ransomware program for Windows machines that encrypts user files as well as the computer's master boot record (MBR), leaving devices unable to load the OS.

    The program is dubbed Satana -- meaning "Satan" in Italian and Romanian -- and, according to researchers from security firm Malwarebytes, it is functional but still under development.
    Users might be able to repair the MBR by using the Windows recovery options, but this requires working with the Windows command line and the bootrec.exe (boot recovery) tool, so it is likely beyond the abilities of typical users.

    The current version of Satana hasnít yet been widely distributed, and the researchers donít expect that it will because the code is not yet mature and has flaws. However, they believe this version will likely serve as a base for future improvements.
    New Satana ransomware encrypts user files and master boot record | PCWorld
      My System SpecsSystem Spec


  2. Joined : Feb 2015
    Bamberg Germany
    Posts : 12,942
    Microsoft Windows 10 Pro 64-bit 14393 Multiprocessor Free
       04 Jul 2016 #2

    And this is why an OFFLINE(external disk stored in the closet, not just turned off, but unplugged) is so important.
    I do weekly('s enuff 4 me) to my 2nd internal, fo incase I mess up something, but, once a month, or so., I update my offline disk. I set it up, let Macrium run and image all 3 internal(for partitioning look at my specs) while I shave, shower, go shopping and eat dinner. I even image my weekly image partition(that's why it takes half a day, it needs to open the compressed files to read them).

    Respect, I gotta hand it to them, encrypting the MBR... and Windows or any PE environment doesn't know where anything is .
      My System SpecsSystem Spec


  3. Joined : Sep 2014
    Posts : 309
    Windows 10 PRO 64Bit
       04 Jul 2016 #3

    A neighbour (a retired 95 year old navy Chaplin) showed me his tablet which he could not shut and it showed a webpage from the cyberpolice demanding $200 or else. I managed to get to shut down but when it rebooted that webpage came up immediately. He took it to a local Geek Squad and they managed to reset it to factory defaults for only $210. Not quite sure now who the crooks are!

    I keep an offline hard drive with a copy of my system and it is the best protection. My only problem is keeping it current.
      My System SpecsSystem Spec


 


Similar Threads
Thread Forum
Solved TeslaCrypt ransomware victims can now decrypt their files for free
TeslaCrypt ransomware victims can now decrypt their files for free | PCWorld
AntiVirus, Firewalls and System Security
Nasty ransomware overwrites your PC's master boot record
Read more: This nasty ransomware overwrites your PC's master boot record | PCWorld
Windows 10 News
Solved This nasty ransomware overwrites your PC's master boot record
This nasty ransomware overwrites your PC's master boot record | PCWorld
AntiVirus, Firewalls and System Security
Solved Can't re-establish Master Boot Record on my Windows 10 Boot drive
I'm perplexed and frustrated. I have a legacy 64 bit dual core desktop (ASUS mobo). I have several Sata hard drives in it with the 4th partition of my 1 Terabyte drive containing my Windows 10 Professional boot OS. After converting another...
Installation and Setup
ALERT!: New ransomware allows one user file 'free' decrypt
New ransomware allows one user file 'free' decrypt By Dimitri Reijerman , Sunday, November 16, 2014 14:26 , comments: 201 , Views: 31,371 ē Feedback Security firms Webroot has a new ransomware-variant found that the user after encrypting the...
AntiVirus, Firewalls and System Security
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 09:24.
Find Us
Twitter Facebook Google+



Windows 10 Forums