New Ransomware Attack Spreading Rapidly Across World

Status
Not open for further replies.

Winkhorst

Prominent
Jun 28, 2017
2
0
510
0
"When the Petya ransomware infects a machine it searches for a folder called "perfc.dll". If it can't find the folder it takes hold of the computer, locking files and part of the hard drive. In the event that it finds the file the ransomware is not able to work."

http://www.telegraph.co.uk/technology/2017/06/28/security-researcher-creates-vaccine-against-ransomware-attack/
 

Paul Wagenseil

Senior Editor
Apr 11, 2014
692
1
4,940
4


Supposedly, yes -- it will stop or prevent the encryption process on an individual machine. It won't stop the ransomware from spreading to other machines in the local network.

But we're seeing reports now that adding 'perfc' may not work on Windows 7, and that the person(s) behind the Petya ransomware may have changed the code so that adding 'perfc' doesn't stop new infections.
 

Winkhorst

Prominent
Jun 28, 2017
2
0
510
0
By the way, the file needs to be set to "read only."
https://www.bleepingcomputer.com/news/security/vaccine-not-killswitch-found-for-petya-notpetya-ransomware-outbreak/
 

Paul Wagenseil

Senior Editor
Apr 11, 2014
692
1
4,940
4


Thanks -- I saw that this morning but haven't had a chance to update the story yet. I am also seeing some reports that this immunization method doesn't work on Windows 7, and may not work on newly infected systems because the malware author(s) may have changed the source code.

 

Paul Wagenseil

Senior Editor
Apr 11, 2014
692
1
4,940
4


Yes, thanks -- that's already in our story.

 
Status
Not open for further replies.
Thread starter Similar threads Forum Replies Date
D Antivirus / Security / Privacy 0
Frankenstein002 Antivirus / Security / Privacy 9
S Antivirus / Security / Privacy 4
A Antivirus / Security / Privacy 9
G Antivirus / Security / Privacy 8
Paul Wagenseil Antivirus / Security / Privacy 10
Marshall Honorof Antivirus / Security / Privacy 1
Paul Wagenseil Antivirus / Security / Privacy 4
Paul Wagenseil Antivirus / Security / Privacy 1
Paul Wagenseil Antivirus / Security / Privacy 2
A Antivirus / Security / Privacy 3
Avast-Team Antivirus / Security / Privacy 2
Paul Wagenseil Antivirus / Security / Privacy 1
anbu13 Antivirus / Security / Privacy 0
Paul Wagenseil Antivirus / Security / Privacy 3
L Antivirus / Security / Privacy 20
Paul Wagenseil Antivirus / Security / Privacy 30
D Antivirus / Security / Privacy 8
T Antivirus / Security / Privacy 1
Marshall Honorof Antivirus / Security / Privacy 1

ASK THE COMMUNITY

TRENDING THREADS