Please don't take RND or Uvah personally, gary. They mean no offense. I see you're relatively new here, so hope this information helps you understand the situation with Win10 & IP: link <span style="text-decorat
Very.
Good on ya, Doc. [e digicons]k6[/e] Rather have the occasional 'false' alarm than a real fire & not know it. I was due to change my master pword, anyway.
Might explain the recent rash of Locky-bearing emails on my gmail account. Thanks for the heads up, Doc.
Keep getting at least 1 or 2 Locky-bearing email hits with each Outlook session (so about once a day), fortunately blocked by Avast's active email scanner. Just know it's out there in force and do the simple things to protect your rig to the extent you can. This isn't the kind of thing that happens due to 'unsafe internet practices' - you can practice safe internet and still get hit. AV alone may be sufficient but considering the stakes I'd advise a
Willy - The free antiransomware tools are "money well spent" and can only protect you.
Eyewitness News .
Lookin' like it should stay safe to swim in the ocean, too. Yeah, I'm already lookin' at you, [e digicons]:jafo:[/e] . [e digicons]O:)[/e]
[quote who="admiralWillyWilber" reply="25" id="3633688"] Some ransomeware lock up the internet if they do just clear your history and exit out of the internet. This seems to work. [/quote] That one was just a little bit outside. [e digicons]8|[/e]
Stop being so damn reticent, Cauldyth! [e digicons];)[/e]
Amazingly enough, I've never once read anything in the forum ban game threads. And nothing in them bothers me in the least.
It was such a refreshingly optimistic moment when Ballmer went away, but the optimism was short-lived & misplaced. Apparently Satya is Hindi for "Suck this!"
No issue... for now. Tells you pretty much where MS is going, though.
My tech guy suspected that, too, at first but he would have expected the antiransomware to lock down permissions for those keys as a way to block access to them & it didn't. I'm inclined to leave the keys alone if/when they show up again, but the guys making this stuff keep massaging it to avoid AV detection so who knows?
It's a gmail-hosted address that is bearing the Locky traffic. May have to get them involved.
Yes. Nothing in the way of this detail on the Avast forums, though ransomware in general discussed. This BD-related thread mentions the Locky reg key and suggests it prevents Locky infection. Still not clear what's going on, but based on the email hits Avast is blocking, Locky is getting aro
Easy, killer. A little more detail information and a little less pointless attitude would help immensely. That assumes you want a resolution to your issue.
Did you see that alphanumeric key in the same section as the Locky key? If so, it's likely a companion key, especially if it's empty. I ran my searches on the entire registry. It's looking like if all we have is the reg keys, we're OK. Risk of ransomware attack would seem to be low if good AV is running.
Additional info today. Avast Pro blocked the Locky trojan in several emails this morning - first time I'd seen a popup indicating so, but I assume there were others that I missed in the past. This happened with active scanning of the inbound emails before they reached my inbox. Found 4 instances of the Locky & 7ouHlW14R0XZ0x keys in the reg, all empty, suggesting that the trojan is able to get that far before Avast blocks it. BitDefender on the other mach
I can report that 18 hours after deleting all found Locky keys and all the 7ou... keys, they remain gone on both rigs. Interesting that CCleaner only picked up one set of the keys as obsolete when there were multiple sets. The only protectionware difference between the two rigs is one runs BitDefender AV, the other Avast Pro AV. Both run MWB, MWB Anti-exploit and BD Antiransomware. And they are now both running WinPatrol WinAntiRansomwarePlus. Still not sure wher
There was a second key in the same section as each Locky key, gibberish alphanumeric name starting with 7ou, that CCleaner had also flagged as obsolete. It, too, kept getting rewritten to the reg, so we nuked all those, too.
I'd love to give you the locations, Uvah, but I wasn't watching real-time as he did the reg search. All you need to do is search in regedit for Locky & delete all found keys.
[quote who="Daiwa" reply="2894" id="3633205"] Gotta love rigging the models to match reality - "SEE, we were right all along!" And stretching the X axis to make 3mm (probably within the margin of measurement error) look like 6 feet. Gotta love that shit. So many holes in that video. Most bigger than the ozone hole. [/quote] And welcome to the circus, Chiller! (I see what you did there [e digicons]:grin:[/e] )
Gotta love rigging the models to match reality - "SEE, we were right all along!" And stretching the X axis to make 3mm (probably within the margin of measurement error) look like 6 feet. Gotta love that shit. So many holes in that video. Most bigger than the ozone hole.
The law of unintended consequences is universal and immutable, Borg. More reliable than the Gas Laws.
JoeUser Forums