Windows 10: New Satana ransomware encrypts user files and master boot record Solved


  1. Posts : 13,266
    Win 7 32, Win 7 64 Pro, Win 8.1 64 Pro, Win 10 64 Education Edition
       04 Jul 2016 #1

    New Satana ransomware encrypts user files and master boot record


    And the news just keeps getting better . Take the time to make back ups & system images.

    System Image - Create in Windows 10 - Windows 10 Forums

    Attackers are developing an aggressive new ransomware program for Windows machines that encrypts user files as well as the computer's master boot record (MBR), leaving devices unable to load the OS.

    The program is dubbed Satana -- meaning "Satan" in Italian and Romanian -- and, according to researchers from security firm Malwarebytes, it is functional but still under development.
    Users might be able to repair the MBR by using the Windows recovery options, but this requires working with the Windows command line and the bootrec.exe (boot recovery) tool, so it is likely beyond the abilities of typical users.

    The current version of Satana hasnít yet been widely distributed, and the researchers donít expect that it will because the code is not yet mature and has flaws. However, they believe this version will likely serve as a base for future improvements.
    New Satana ransomware encrypts user files and master boot record | PCWorld
      My ComputerSystem Spec


  2. Posts : 14,872
    Microsoft Windows 10 Pro 64-bit 14393, Windows 10 Insider Fast Ring, Windows 8.1 Update, Ubuntu
       04 Jul 2016 #2

    And this is why an OFFLINE(external disk stored in the closet, not just turned off, but unplugged) is so important.
    I do weekly('s enuff 4 me) to my 2nd internal, fo incase I mess up something, but, once a month, or so., I update my offline disk. I set it up, let Macrium run and image all 3 internal(for partitioning look at my specs) while I shave, shower, go shopping and eat dinner. I even image my weekly image partition(that's why it takes half a day, it needs to open the compressed files to read them).

    Respect, I gotta hand it to them, encrypting the MBR... and Windows or any PE environment doesn't know where anything is .
      My ComputersSystem Spec

  3.    04 Jul 2016 #3

    A neighbour (a retired 95 year old navy Chaplin) showed me his tablet which he could not shut and it showed a webpage from the cyberpolice demanding $200 or else. I managed to get to shut down but when it rebooted that webpage came up immediately. He took it to a local Geek Squad and they managed to reset it to factory defaults for only $210. Not quite sure now who the crooks are!

    I keep an offline hard drive with a copy of my system and it is the best protection. My only problem is keeping it current.
      My ComputerSystem Spec


 

Related Threads
Solved TeslaCrypt ransomware victims can now decrypt their files for free in AntiVirus, Firewalls and System Security
TeslaCrypt ransomware victims can now decrypt their files for free | PCWorld
Read more: This nasty ransomware overwrites your PC's master boot record | PCWorld
Solved This nasty ransomware overwrites your PC's master boot record in AntiVirus, Firewalls and System Security
This nasty ransomware overwrites your PC's master boot record | PCWorld
I'm perplexed and frustrated. I have a legacy 64 bit dual core desktop (ASUS mobo). I have several Sata hard drives in it with the 4th partition of my 1 Terabyte drive containing my Windows 10 Professional boot OS. After converting another...
ALERT!: New ransomware allows one user file 'free' decrypt in AntiVirus, Firewalls and System Security
New ransomware allows one user file 'free' decrypt By Dimitri Reijerman , Sunday, November 16, 2014 14:26 , comments: 201 , Views: 31,371 ē Feedback Security firms Webroot has a new ransomware-variant found that the user after encrypting the...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 12:46.
Find Us