Virus Warning – Crypto locker

A variant of the Crypto Locker virus is doing its rounds again.  This virus attacks your files, documents, spread sheets and pictures, and is especially designed to attack businesses and small networks. 

We have seen a sharp increase in customers being affected by this very nasty virus or variants of it. Its latest form of attack is through “captcha codes” and .zip files attached to emails, in particular an overdue account email from AGL. 

DO NOT enter the alpha numeric code (captcha code) they are asking for.  Once you do this you are directed to open an infected file which will commence “locking” your files in the background as you continue to stay logged into your computer.  Your antivirus software may pop up a warning if it is up to date with the new threats, however once you click you are overriding their permissions and allowing the infection into your computer.  You will know you have the Crypto Locker virus as a window will pop up telling you your data is encrypted and asking you to pay a ransom to get it repaired. 

Once you files have been “locked” there is no way to retrieve them without paying this ransom.  This is not recommended as you are dealing with criminals and there is no guarantee that they will decrypt your data and not extort you further. At this point and time the only way to retrieve your data is from a clean backup. The best prevention to be effectively protected from this latest attack you should ensure that you: 

• NEVER open ZIP files or executable documents that are unexpected. 

• Don't open any attachments if you're not sure of their origin. 

• Be suspicious of ALL emails (even from friends and colleagues) make sure there is not extension at the end of their email address. 

• Make sure your Microsoft Windows Updates are done. 

• Have an effective Antivirus or Malware program that is UP TO DATE. 

• Do regular Backups and are checked to be WORKING regularly. Keep this disconnected from your computer to avoid infection. 

For more information please read the full warning provided by the Government Stay Smart service here.