Having been beaten once, you can talk to me. I will do an initial assessment to see whether you will be helped. I defeated the ransom seeker and in the process I discovered a lot. The earlier you work on your files, the better before they do multiple encryption on your files making it extremely difficult to be helped.

Kind Regards

Peter - 0721586109

On Sat, Nov 5, 2016 at 11:56 AM, Odhiambo Washington via skunkworks <skunkworks@lists.my.co.ke> wrote:

In that case, if I were you, and I had put all the necessary backup policy and utils in place, I wouldn't worry. However, it looks you still hadn't!

You could have at least configured a scheduled task to do backup if they don't. Here is something that might help you in the future:

1. Have a NAS in place for storing backups (and have this NAS store backed up too!)

2. Use a little batch file for doing backup

3. This batch file/script should be written such that it maps the NAS for backup, does backup, then disconnects the mapped drive.

4. Configure the batch file to be run via the task scheduler (TS). If it fails to run because the computer was off at the scheduled time, it

    should run immediately the computer is turned on. It's an option in the TS.

5. The batch file should create dated compressed backups, i.e.Derry-YYYY-MM-DD-HHMM.zip [I like this for seeing the sizes and last

    date that I can use for restore in case shit happens.

6. Put a link to this batch file on the desktop and tell the use that it is their "Life Preserver" which they must ensure they run at least every day!

7. Take (literally) a bucket of water and wash your hands in front of them, disclaiming that you will no longer take responsibility for their failure

     to run the batch file <LOL>

On 5 November 2016 at 11:44, George Derry <gderry15@gmail.com> wrote:

@ Washi sadly no, even after advising them to backup, only to discover the same user wasn't backing up... maybe waiting for the I.T guy to do it...

On Nov 5, 2016 11:34 AM, "Odhiambo Washington via skunkworks" <skunkworks@lists.my.co.ke> wrote:

At least you have backups to rely on.

On 5 November 2016 at 11:25, George Derry via skunkworks <skunkworks@lists.my.co.ke> wrote:

Ooh no nooh am damn f****d

On Nov 5, 2016 10:32 AM, "Marcus Cicero via skunkworks" <skunkworks@lists.my.co.ke> wrote:

Save yourself the energy and nuke the infected drives.

Thor is a new version of Locky and there are no decryption tools in the public domain.

-------- Original Message --------

Subject: Re: [Skunkworks] No More Ransomware

Local Time: November 5, 2016 10:08 AM

UTC Time: November 5, 2016 7:08 AM

From: skunkworks@lists.my.co.ke

To: Skunkworks Mailing List <skunkworks@lists.my.co.ke>, Kelvin <kjayanoris@gmail.com>

Hello skunks

Woke up with a thor virus on one of my pcs all my data is encrypted

Anyone with an idea of how to get my data back?

_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------

Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke

_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------

Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke

--

Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254 7 3200 0004/+254 7 2274 3223
"Oh, the cruft."

_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------

Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke

--

Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254 7 3200 0004/+254 7 2274 3223
"Oh, the cruft."

_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------

Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke

--

----------
Don't wait for success; hunt it down like there's no tomorrow.

_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------

Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke