CryptoLocker and other Ransomware

post-ransomware

What is CryptoLocker?

As a little background, CryptoLocker is a ransomware trojan that targets computers running Microsoft Windows.  It is typically propagated as an attachment to a seemingly innocuous e-mail message, which appears to have been sent by a legitimate company.  There is a ZIP file often disguised with a PDF icon.  The payload then encrypts files across local hard drives and mapped network drives with 2048-bit RSA encryption.  Essentially they have your data and require payment by a specified date or the data is destroyed.  Source: wikipedia.org

What about a backup?

Not all backup solutions are created equal.  The first thing to consider is that many local backup solutions rewrite files to a local hard drive on a scheduled basis.  In many cases, the prior good backup has been overwritten written with the locked files. Or if an external drive was attached to the infected computer it will also be locked along with all backup data.

How does SafeCopy Backup help?

SafeCopy Backup has introduced a new snapshot feature where you can restore everything from a previous date.  First, remove the malware with a clean and updated installation of Windows. Next open the SafeCopy software and click the restore button, then select the date just prior to the ransomware infection and restore.


If you were a victim of ransomware, tell us your story at shoutout@safecopybackup.com.