Virus Advisory: CryptoLocker

  • S07E03
  • October 15, 2013

Adam Kujawa from Malwarebytes joins us to discuss what is possibly the most devastating computer virus of recent years, and how we can protect ourselves from it.

This video is provided free of charge. If you enjoy what we do, please consider becoming a Patron so we can continue offering more great content.
Support This Free Content
This episode is sponsored in part by: Eco Alkalines.

Topics Covered:

  • {play 2:50}Announcing our Indiegogo crowdfunding campaign to build Studio D for Category5 Technology TV. http://cat5.tv/studio
  • {play 5:13}Feature: An interview with Adam Kujawa from Malwarebytes about CryptoLocker: One of the most destructive viruses we've seen in a long time.
    • What makes CryptoLocker much different (and much more dangerous) than past ransomware.
    • Antivirus will remove a CryptoLocker infection, but your files will still be lost.
    • CryptoLocker will spider through mapped network shares and encrypt (destroy) all personal files that it finds. It is not limited to the local machine.
    • How CryptoLocker gets into someone's system.
    • Chrome vs. Firefox vs. Internet Explorer.
    • Making sure your Java and Flash are up to date may help protect you.
    • Disabling the Java extension in your browser may help.
    • CryptoLocker on Linux and Mac: currently it is only a concern if you have network shares accessible to Windows computers or virtual machines.
    • Malwarebytes Anti-Exploit is a new tool which offers a resident exploit blocker, proactively preventing the execution of CryptoLocker and other malware.
    • Backups (and backups of your backups) is the only real protection right now against CryptoLocker.
    • CryptoLocker is [currently] unable to affect Volume Shadow Copies, so you may be able to recover some or all of your files if you have a recent snapshot on your Windows machine.
    • Offsite backup (Free Trial) offers the best protection for your files.
    • A RAID 1 as a backup solution will not protect you from CryptoLocker: all files will be lost.
    • Even if you have a good backup, recovery can take a lot of time.
    • Malwarebytes Anti-Malware PRO includes protection which prevents Malware execution, and therefore protects against viruses such as CryptoLocker.
    • CryptoLocker could even use your Windows virtual machines to crawl your Linux network and destroy your files.
    • CryptoLocker doesn't necessarily come from "bad" sites. Legitimate web sites can become infected and then begin distributing the code.
    • CryptoLocker's infection is spreading, and it is believed that this is just the beginning of this type of dangerous malware.
    • Windows XP machines are more susceptible than newer systems because the software can no longer be updated.
    • Product Giveaway: A lifetime license of Malwarebytes Anti-Malware PRO.
    • The Malwarebytes Blog features a post about CryptoLocker.
    • Robbie's Blog also has a post specifically about CryptoLocker.
  • {play 28:27}Welcome to newly registered viewers.
  • {play 30:33}Top Stories from the Category5.TV Newsroom
    • A new wireless pacemaker is less than 1/10th the usual size, and is approved in the EU.
    • A secure email service is going to be developed in Brazil.
    • Ford is working on tech that takes over your vehicle in event of a pending collision.
    • A frightening exploit has been found in D-Link routers.
  • {play 39:33}Viewer Question: How do I install wine on Point Linux?
    • Installing wine and winetricks on Linux.
    • Executing a Windows application from within Linux using wine.
    • Creating an application launcher on Linux which runs a Windows application using wine.
  • {play 45:51}Viewer Question: Can you give instructions for using dd to create a bootable drive from an ISO?
    • No: it would seem dd is the wrong tool for what the user is hoping to do. We hope to receive more information about their goal so we can assist.
  • {play 47:25}Viewer Question: I have a system dual-booting Windows 7 and Linux. On the Windows 7 partition, I would like to disable the USB ports, but still be able to use the USB keyboard and mouse. How do I do this?
    • The issue with simply disabling USB.
    • Disabling USB Mass Storage on Windows is very easy.
      • Backup your registry
      • Browse to HKEY_LOCAL_MACHINE->SYSTEM->CurrentControlSet->Services->USBSTOR
      • Locate the "Start" key on the right pane and change its value data to 4 to disable USB Storage (3 to re-enable)
      • Reboot your computer for the changes to take effect: you'll see plugging in a USB hard drive or flash drive will no longer work
    • Check out Endpoint Protector for software which would allow you to disable specific devices, such as USB WiFi adapters.
  • {play 52:44}Viewer Question: I believe you misunderstood my question from a couple weeks ago. My webcam works in Cheese on Linux, but not in Skype. Skype is pointing to /dev/video0.
    • Using Cheese to determine the device location of your webcam.
    • Verifying that Skype settings are pointing to the correct device location for your webcam.
  • {play 56:01}Viewer Picture: Here is my setup when watching the live show.
  • {play 57:44}Don't forget to support us through http://cat5.tv/studio, with our thanks!
  • {play 58:27}Spacefish (Major Tom) died. Read about it in Robbie's blog.

Discussion

Twitter Posts

Login to Category5

Error message here!

Hide Error message here!

Forgot your password?

Register on Category5

Error message here!

Error message here!

Hide Error message here!

Lost your password? Please enter your email address. You will receive a link to create a new password.

Error message here!

Back to log-in

Close