Disk-level encryption to lock users out of their computers

[johnrobert]

http://www.techspot.com/news/64271-new-form-ransomware-uses-disk-level-encryption-lock.html

 

[kpk1]

More fun and games....

 

[Just Larry]

Where will it end

 

[MotzTech]

Wait...does it encrypt the MBR or the MFT?

If it's just the MBR that can be blown away pretty easy.

 

[ftcnet]

"The attackers, .. say that attempting to fix the master boot record won’t decrypt the ransomware, and may result in the purchased decryption key not working."

"It is important to note that there is a lot of bad information on the web about how how to fix your computer when it has been encrypted by Petya. Many of these sites state that you can use the FixMBR command or repair your MBR to remove the infection. Though this will indeed remove the lock screen, it will not decrypt your MFT and thus your files and Windows will still be inaccessible. Only repair the MBR if you do not care about any lost data and want to reinstall Windows."

Yes, you can use data recovery tools that ignore the MFT (ex: Recuva) and have some success in recovering files, but don't expect to get them all back intact.

 

[DataRecoverySingapore]

seems like more ransomware is floating around the net with no solution at all.

 

[ohio_grad_06]

Someone posted about this yesterday, apparently there's a fix for this one available.

https://www.technibble.com/forums/t...word-needed-for-decryption.69614/#post-546410