Jesse, I assume it was email thank you?
Yep. Occasionally I still get one on paper, and now I think that's weird!
So my poor mother's computer is being held hostage and they may not be able to get her stuff back. :(
Dawn ,'Beneath You'
Off-topic discussion. Wanna talk about corsets, duct tape, butt kicking, or physics? This is the place. Detailed discussion of any current-season TV must be whitefonted.
Jesse, I assume it was email thank you?
Yep. Occasionally I still get one on paper, and now I think that's weird!
So my poor mother's computer is being held hostage and they may not be able to get her stuff back. :(
Ransomware?
Cass, this is horrifying. I can't even imagine how hard this is for you and your family. I'm wishing for the best.
Matt, good thoughts going out for your friend.
Ransomware?
Obnoxious stuff. It hits our users on a regular basis. I've dealt personally with 7 people this year with their data locked down.
So my poor mother's computer is being held hostage and they may not be able to get her stuff back. :(
That happened to one of my team members last year. Ugh. I would not expect that situation to resolve well.
Occasionally I still get one on paper, and now I think that's weird!
Totally.
Ransomware?
Apparently.
So what should she have done? And how do you protect yourself?
From what I understand there is a toolkit that can unencrypt some cases of ransomware. Apparently some, but not all, of these guys (or gals I suppose, let's just go with scum). Anyhow some of the scum that make ransomware aren't great with encryption and simply used random values to generate keys. Since it goes on to encrypt files that creates timestamps on the files and the default random value seed is often the current time, it's possible to guess the keys from the time when the encryption started.
This is why you should use an entropy store instead of just generating a random number.
My work computer got infected with ransomware a year ago, despite having antivirus software.
The best thing to do is to have an automatic backup so if your computer is infected you can nuke it from orbit and reinstall everything.
So what should she have done? And how do you protect yourself?
Always back up stuff you need with software than can restore earlier versions and not just the latest version. Apply OS updates and use updated anti-malware software. Anti-malware software isn't so important on Mac and Linux though.
Here's a link to some decryptors if your mom is lucky enough to have gotten an infection from scum who aren't good at encryption.