[28011] in resnet
Re: FBI Moneypak ramsonware
daemon@ATHENA.MIT.EDU (Hamilton, Bob)
Mon Oct 8 09:38:27 2012
Content-Language: en-US
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
X-Emory-MailScanner-From: bob.hamilton@emory.edu
Content-Transfer-Encoding: 8bit
Message-ID: <D75FD8AF5896664D8AA1163B9B4F8E208C133648@E14MBX13N.Enterprise.emory.net>
Date: Mon, 8 Oct 2012 13:37:04 +0000
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: "Hamilton, Bob" <bob.hamilton@emory.edu>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <9AF279DD359BD14DA5F7B23E04570DE029DAC0@exch-mbx01.exchange.upenn.edu>
I had it happen on an older XP machine. I just did a System Restore back about 7 days and all SEEMS OK now.
Bob Hamilton
-----Original Message-----
From: Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] On Behalf Of Caroline Couture
Sent: Monday, October 08, 2012 9:25 AM
To: RESNET-L@LISTSERV.ND.EDU
Subject: FBI Moneypak ramsonware
Hi Folks!
I knew such things existed but I've never seen this in person until now.
We tried using some of the various "typical" tools for removal, SuperAntiSpyware and the AVG boot disk, had no luck, and the manual removal instructions don't match up with what we are seeing but this may be because we tried removing it with anti-virus applications first.
Has anyone successfully cleaned a machine with this ransomware? Or should I not waste my time and just reformat. (Which will be painful since the student probably doesn't have her software since the computer is two year old.)
Thanks!
Caroline
"We're all going to die, all of us, what a circus! That alone should make us love each other but it doesn't. We are terrorized and flattened by trivialities, we are eaten up by nothing." - Charles Bukowski
Caroline Couture
College House Computing
3702 Spruce Street
215.573.3887
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives, go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
________________________________
This e-mail message (including any attachments) is for the sole use of
the intended recipient(s) and may contain confidential and privileged
information. If the reader of this message is not the intended
recipient, you are hereby notified that any dissemination, distribution
or copying of this message (including any attachments) is strictly
prohibited.
If you have received this message in error, please contact
the sender by reply e-mail message and destroy all copies of the
original message (including attachments).
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
