Another Windows Worm - This one will encrypt everything on your computer

[Bill Havins]

Folks,

I know this isn't a F6C topic but, since I appreciate you all, I want you to be aware that the Windows worm that has been attacking PCs today is a bit of a bear!  It is called "Not Petya."

I can't tell you a lot about how I am aware of this, but let's leave it at I have a relationship with one of the world's largest technology groups.

The worm gets into systems the same way the "WannaCry" worm gets in (using the NSF's "leaked" Windows back doors).  It can also get into a system through an Office document or file attached to an email.  There may be other ways it infects computer systems.

Once in a system it is much more malicious than the "WannaCry" worm.  As yet there is no "cure" except to wipe the hard drive and reinstall Windows.

If you are using a Windows Version earlier than Windows 10 Version 1703 be sure to get your operating system "patched."  Patches are available for everything from Windows 7 and up.  The "patch" will limit vulnerability but is not a guarantee against infection.

Practice good computer hygiene.  Don't open an email attachment until you scan it with a capable anti-virus program;  better yet, save it to your hard disk (instead of opening it), scan it, and then consider if you really need to open it.  If you don't, throw it away and empty the trash.  Even better than that, don't open email attachments.

Don't let anyone stick their stinkin' USB flash drive into your computer.

Don't "join" unfamiliar or "unmonitored" computer networks.

Back up your important files frequently (at least once a week if you make changes during the week).

Don't click on links until you have scanned the address with your virus protection program.

Download the latest version/definitions for your anti-virus software.  Do it again.  And again.

This one is a real poothead of a worm.  I don't want any of us getting hurt.

Bill

[goldstar903]

Read 19 times and no one said thanks? Thanks, Bill! I knew about it but like probably everyone else not as much as you. Hey Bill, where are those aliens that they found in Roswell, 1947? Do tell! 

[Verismo]

Good lookin' out, Bill.  Thanks for the heads up.

[Robert]

Bill thanks for the warning, I have posted a link to an article in Bleeping computer that tells you how to vaccinate your computer.

Bleeping computer:

Vaccine, not Killswitch, Found for Petya (NotPetya) Ransomware Outbreak

Cybereason security researcher Amit Serper has found a way to prevent the Petya (NotPetya/SortaPetya/Petna) ransomware from infecting computers.The researcher's initial findings have been later confirmed by other security researchers, such as PT Security, TrustedSec, and Emsisoft.

To vaccinate your computer so that you are unable to get infected with the current strain of NotPetya/Petya/Petna (yeah, this naming is annoying), simply create a file called perfc in the C:\Windows folder and make it read only.

https://www.bleepingcomputer.com/news/security/vaccine-not-killswitch-found-for-petya-notpetya-ransomware-outbreak/

[Kidd]

I am afraid to click on that link ,Bob , ya never know what's hiding in 'em

Bill thanks for the warning, I have posted a link to an article in Bleeping computer that tells you how to vaccinate your computer.

Bleeping computer:

Vaccine, not Killswitch, Found for Petya (NotPetya) Ransomware Outbreak

Cybereason security researcher Amit Serper has found a way to prevent the Petya (NotPetya/SortaPetya/Petna) ransomware from infecting computers.The researcher's initial findings have been later confirmed by other security researchers, such as PT Security, TrustedSec, and Emsisoft.

To vaccinate your computer so that you are unable to get infected with the current strain of NotPetya/Petya/Petna (yeah, this naming is annoying), simply create a file called perfc in the C:\Windows folder and make it read only.

https://www.bleepingcomputer.com/news/security/vaccine-not-killswitch-found-for-petya-notpetya-ransomware-outbreak/

[Bill Havins]

By the way, when you fashion your tin foil hat, remember to fold it so any scrambled egg stuck to the foil is on the inside.  The dried egg will absorb any of the "rays" that get through the tin foil, providing better protection for your brain. 

Seriously, it looks like resolutions for this one have been developed.  But it's kinda' like radiation after a nuclear explosion - it can still damage your computer if you get the worm in your machine (it's still out there).  Now it appears what is left to do is clean up the mess.

Bill

[Robert]

By the way, when you fashion your tin foil hat, remember to fold it so any scrambled egg stuck to the foil is on the inside.  The dried egg will absorb any of the "rays" that get through the tin foil, providing better protection for your brain. 

Seriously, it looks like resolutions for this one have been developed.  But it's kinda' like radiation after a nuclear explosion - it can still damage your computer if you get the worm in your machine (it's still out there).  Now it appears what is left to do is clean up the mess.

Bill

Bill LOL, but I and the rest of the world would be open to any better solutions. 

Actually I did not mention that some anti virus software stops this also, mine does and if you want some more info or a vulnerability checker here is a link. The link is safe so dont worry. This threat is mostly in Europe and Ukraine and not so much in the US also.

https://www.eset.com/us/about/newsroom/corporate-blog/petya-ransomware-what-we-know-now/?elq_mid=3207&intcmp=emc-elq-wd-cons-062817&elqTrackId=1f7be4ae77b94e85a7bf42a130b238aa&elq=ff18e6f79c99490ea06e8965780be6c3&elqaid=3207&elqat=1&elqCampaignId=1461