Cheers Kandie I have done that for since 2009 ! Regards On Wed, Sep 21, 2016 at 4:08 PM, David K. Kandie via skunkworks < skunkworks@lists.my.co.ke> wrote:
Always remember to plug the machine off network to avoid sync. ------------------------------ From: Odhiambo Washington <odhiambo@gmail.com> Sent: 9/21/2016 3:37 PM To: Maisiba Bravo <riggson87@gmail.com>; Skunkworks Mailing List <skunkworks@lists.my.co.ke> Cc: David K. Kandie <kipkanists@gmail.com> Subject: Re: [Skunkworks] Cerber Ransomware
While you guys are working on this, I have seen two situations where both Cerber and Zepto ransomware messed up two entities.
Since then, I have been thinking about how to always be ready to mitigate the effects. And the surest way is backup, backup, backup.
In situations where files are stored on shared drives on the network, the situation is even worse should the share not have a backup elsewhere.
In the meantime, this tool should help Windows users create backups -> http://www.2brightsparks.com/download-syncbackfree.html
On 21 September 2016 at 14:48, Maisiba Bravo via skunkworks < skunkworks@lists.my.co.ke> wrote:
*Avoid* Ammyy Admin website <http://ammyy.com> *The website is compromised to spread Cerber 3 Ransomware.*
http://news.softpedia.com/news/ammyy-admin-website-compromis ed-to-spread-cerber-3-ransomware-508330.shtml
There are some decryption softwares as quoted in some articles, feared to try any tho'
Bravo
On Wed, Sep 21, 2016 at 2:39 PM, David K. Kandie <kipkanists@gmail.com> wrote:
I am victim - still looking for help. All files are now .cerber and have also synced with Office 365 ------------------------------ From: charles kungu via skunkworks <skunkworks@lists.my.co.ke> Sent: 9/21/2016 2:23 PM To: Maisiba Bravo <riggson87@gmail.com>; Skunkworks Mailing List <skunkworks@lists.my.co.ke> Subject: Re: [Skunkworks] Cerber Ransomware
Yeap. My cleint was attacked by batman_good@aol.com.xtbl
They encrypted some files, and changed them to .xtbl format, still figuring how to decry pt the files that were not backed up.
On Wed, Sep 21, 2016 at 1:34 PM, Maisiba Bravo via skunkworks < skunkworks@lists.my.co.ke> wrote:
Any victim?
Bravo
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards, C . K
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- ALVIN OCHOLA 0722-313923