What You Need to Know About the Crypto Virus and Ongoing Ransomware Threats

Occasionally, a computer virus comes along that is either so new, so different, or so widespread that it isn’t just a subject of interest to IT professionals, but a topic of national discussion. That’s certainly the case with the so-called “crypto virus,” which has been introducing thousands of people to ransomware every day.

If you aren’t familiar with the term ransomware, it refers to programs that hold your computer or hard drive hostage, demanding that you pay a ransom fee if you want to get your information/data back. That’s exactly how the crypto virus works. Once users become infected, they see an error screen that tells them they have a fixed amount of time, usually 100 hours, to send money to the virus developer before all information on the drive will be permanently deleted.

Obviously, that can put anyone in a tough position. So, I thought I would look at what we know about the virus, what you can do if it infects your computer, and the steps you can take to avoid it.

How the Crypto Virus Spreads

Like many other computer viruses and forms of malware before it, the crypto virus spreads through email attachments. Typically, these are disguised as PDF or Word files, hiding in official-looking emails designed to look like they are from recognizable companies like UPS, FedEx, or DHL.

Once you open the message, and the accompanying attachment, the virus hijacks your computer, and only the ransom screen will be shown. Typical ransom amounts are reported to be in the £100-£300 range, but may go as high as £700.

What to do if you’re Computer Becomes infected with the Crypto Virus

The first thing to do, if you detect that one of your computers has become infected with the crypto virus, is to disconnect it from the network (By this I mean disconnect it from your broadband router/modem). Also, avoid connecting the computer to any external drives or storage devices. It is possible for connected computers, or entire networks, to become infected from a single workstation that’s sharing information.

Next, speak with an IT professional immediately. Do not attempt to remove the malware with your current antivirus or utilities package – at the time of this writing, there isn’t a way for these types of software to remove the encryption from affected files or drives, but attempting to use them might make things worse.

If you have a reliable backup and data recovery system in place, your IT support can probably restore your files and computer back to a previous save point within an hour or two.

Of course another possibility is to simply pay the ransom. However, not only does this involve further costs, it encourages future ransomware developers to keep inventing more computer viruses.

How to Avoid the Crypto Virus and Other Malware

Obviously, the best way to deal with any computer virus is to not be affected by it in the first place. With that in mind, here are a few tips for keeping your computers clean and running smoothly:

• Never install software you aren’t familiar with, and be very wary of unexpected attachments within email messages, even if they seem to come from a reputable source.

• Work with a knowledgeable and reliable IT partner who can help you maintain high levels of security and spot any potential problems quickly.

• Do not use websites distributing illegal copies of software, music, or movies.

• Back up the data on your personal and work computers frequently, so that your most important files and information are always close at hand if you need them in an emergency.

Hope this helps answer some of the queries you have. Don't forget we are always here to help, so if there's still something you wish to know or you still have unanswered questions please give us a call - 01256 479700