Wash, Please note that the backup can contain the ransomware since some work with a time bomb. So in addition to backup include other measures such as antimalware, patched systems, user education etc Regards, From: Odhiambo Washington via skunkworks [mailto:skunkworks@lists.my.co.ke] Sent: Wednesday, September 21, 2016 3:36 PM To: Maisiba Bravo <riggson87@gmail.com>; Skunkworks Mailing List <skunkworks@lists.my.co.ke> Subject: Re: [Skunkworks] Cerber Ransomware While you guys are working on this, I have seen two situations where both Cerber and Zepto ransomware messed up two entities. Since then, I have been thinking about how to always be ready to mitigate the effects. And the surest way is backup, backup, backup. In situations where files are stored on shared drives on the network, the situation is even worse should the share not have a backup elsewhere. In the meantime, this tool should help Windows users create backups -> http://www.2brightsparks.com/download-syncbackfree.html On 21 September 2016 at 14:48, Maisiba Bravo via skunkworks <skunkworks@lists.my.co.ke <mailto:skunkworks@lists.my.co.ke> > wrote: Avoid Ammyy Admin website <http://ammyy.com> The website is compromised to spread Cerber 3 Ransomware. http://news.softpedia.com/news/ammyy-admin-website-compromised-to-spread-cer... There are some decryption softwares as quoted in some articles, feared to try any tho' Bravo On Wed, Sep 21, 2016 at 2:39 PM, David K. Kandie <kipkanists@gmail.com <mailto:kipkanists@gmail.com> > wrote: I am victim - still looking for help. All files are now .cerber and have also synced with Office 365 _____ From: charles kungu via skunkworks <mailto:skunkworks@lists.my.co.ke> Sent: 9/21/2016 2:23 PM To: Maisiba Bravo <mailto:riggson87@gmail.com> ; Skunkworks Mailing List <mailto:skunkworks@lists.my.co.ke> Subject: Re: [Skunkworks] Cerber Ransomware Yeap. My cleint was attacked by batman_good@aol.com.xtbl They encrypted some files, and changed them to .xtbl format, still figuring how to decry pt the files that were not backed up. On Wed, Sep 21, 2016 at 1:34 PM, Maisiba Bravo via skunkworks <skunkworks@lists.my.co.ke <mailto:skunkworks@lists.my.co.ke> > wrote: Any victim? Bravo _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke <mailto:skunkworks@lists.my.co.ke> ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24 <http://my.co.ke/phpbb/viewtopic.php?f=24&t=94> &t=94 ------------ Other services @ http://my.co.ke -- Regards, C . K _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke <mailto:skunkworks@lists.my.co.ke> ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24 <http://my.co.ke/phpbb/viewtopic.php?f=24&t=94> &t=94 ------------ Other services @ http://my.co.ke -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."