files named to .vault

[Mainstay]

I suppose if each user has complete read/write access to every file.

We normally segment the data to division / department.

Interesting situation... wonder if you could script to watch for renaming to .vault and shut down a user account.

Either way - there are always backups to restore from...

I know that in some situations we have been able to simply restore (in Windows) "from previous versions" but someone on these forums mentioned they had seen (or expected to see) the cryptovirus encrypt these files as well.

 

[NJW]

smb sharing

That's the problem, whatever the platform. External resources mounted with a drive letter are vulnerable.