
Hi Pals, woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674 - README HTML Application Anyone gotten this attack before? *Kevin Ochieng'* Skype : kevinjanabi Phone : +254 733229214 +254727217330

Did you attempt to restore from backups? -------- Original Message -------- Subject: [Skunkworks] How to Remove Ransomware Local Time: 5 October 2016 6:55 PM UTC Time: 5 October 2016 15:55 From: skunkworks@lists.my.co.ke To: Skunkworks Mailing List <skunkworks@lists.my.co.ke> Hi Pals, woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674 - README HTML Application Anyone gotten this attack before? Kevin Ochieng' Skype : kevinjanabi Phone : +254 733229214 +254727217330

if you don't have a backup then forget any other solution . On Wed, Oct 5, 2016 at 7:19 PM, alex watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
anti malware did not prevent the attack?
On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hi Pals,
woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674 - README HTML Application
Anyone gotten this attack before?
*Kevin Ochieng'*
Skype : kevinjanabi Phone : +254 733229214 +254727217330
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards, C . K

Ransomware is NOT malware in the true sense of malware. Ransomware is more like you personally decide to run a program that encrypts your files, only this time it's not you :-) AFAICT, no antivirus will ever detect ransomware. Again, ransomware requires the user to be gullible enough to run it. Sorry Kevin. On 5 October 2016 at 19:19, alex watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
anti malware did not prevent the attack?
On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hi Pals,
woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674 - README HTML Application
Anyone gotten this attack before?
*Kevin Ochieng'*
Skype : kevinjanabi Phone : +254 733229214 +254727217330
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."

Wash, Is it possible an attacker can break into a server, escalate their privilege to root or admin, run the encryption tool on data directory then ask for ransom? Just a random thought. Kennedy On 5 Oct 2016 21:12, "Odhiambo Washington via skunkworks" < skunkworks@lists.my.co.ke> wrote:
Ransomware is NOT malware in the true sense of malware. Ransomware is more like you personally decide to run a program that encrypts your files, only this time it's not you :-) AFAICT, no antivirus will ever detect ransomware. Again, ransomware requires the user to be gullible enough to run it. Sorry Kevin.
On 5 October 2016 at 19:19, alex watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
anti malware did not prevent the attack?
On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hi Pals,
woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674 - README HTML Application
Anyone gotten this attack before?
*Kevin Ochieng'*
Skype : kevinjanabi Phone : +254 733229214 +254727217330
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

Yes Ken I think that's possible.it could be the case. On Wednesday, 5 October 2016, Kennedy Aseda via skunkworks < skunkworks@lists.my.co.ke> wrote:
Wash,
Is it possible an attacker can break into a server, escalate their privilege to root or admin, run the encryption tool on data directory then ask for ransom? Just a random thought.
Kennedy
On 5 Oct 2016 21:12, "Odhiambo Washington via skunkworks" < skunkworks@lists.my.co.ke <javascript:_e(%7B%7D,'cvml','skunkworks@lists.my.co.ke');>> wrote:
Ransomware is NOT malware in the true sense of malware. Ransomware is more like you personally decide to run a program that encrypts your files, only this time it's not you :-) AFAICT, no antivirus will ever detect ransomware. Again, ransomware requires the user to be gullible enough to run it. Sorry Kevin.
On 5 October 2016 at 19:19, alex watila via skunkworks < skunkworks@lists.my.co.ke <javascript:_e(%7B%7D,'cvml','skunkworks@lists.my.co.ke');>> wrote:
anti malware did not prevent the attack?
On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks < skunkworks@lists.my.co.ke <javascript:_e(%7B%7D,'cvml','skunkworks@lists.my.co.ke');>> wrote:
Hi Pals,
woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674 - README HTML Application
Anyone gotten this attack before?
*Kevin Ochieng'*
Skype : kevinjanabi Phone : +254 733229214 +254727217330
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke <javascript:_e(%7B%7D,'cvml','skunkworks@lists.my.co.ke');> ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke <javascript:_e(%7B%7D,'cvml','skunkworks@lists.my.co.ke');> ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- *Kevin Ochieng'* Skype : kevinjanabi Phone : +254 733229214 +254727217330

My answer is NO! Someone must have opened the ransomware app and run it! Funnily, they don't show you if they are running. For the ones in Office document macros you do get a warning (because of the macro) but I can tell you a gullible person will run the macro, because the subject of the e-mail/or body is normally so sweet/attractive/creates anxiety. Just for the kicks, at some client's office, I wrote a rudimentary batch script to backup a server. The script maps a network drive, does the backup by creating a dated file (compressed), then disconnects the network drive. That way if a user get's the server encrypted, the backup drive will not be encrypted. Why did I do this? Because ransomware checks even shared drives and encrypts them as long as it gets the write permissions. On 5 October 2016 at 21:17, Kennedy Aseda <samskid5@gmail.com> wrote:
Wash,
Is it possible an attacker can break into a server, escalate their privilege to root or admin, run the encryption tool on data directory then ask for ransom? Just a random thought.
Kennedy
On 5 Oct 2016 21:12, "Odhiambo Washington via skunkworks" < skunkworks@lists.my.co.ke> wrote:
Ransomware is NOT malware in the true sense of malware. Ransomware is more like you personally decide to run a program that encrypts your files, only this time it's not you :-) AFAICT, no antivirus will ever detect ransomware. Again, ransomware requires the user to be gullible enough to run it. Sorry Kevin.
On 5 October 2016 at 19:19, alex watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
anti malware did not prevent the attack?
On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hi Pals,
woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674 - README HTML Application
Anyone gotten this attack before?
*Kevin Ochieng'*
Skype : kevinjanabi Phone : +254 733229214 +254727217330
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."

Nice move ken Warm Regards, Owen Sakawa Tel: +254723060160 Skype: owen.sakawa On Wed, Oct 5, 2016 at 9:31 PM +0300, "Odhiambo Washington via skunkworks" <skunkworks@lists.my.co.ke> wrote: My answer is NO! Someone must have opened the ransomware app and run it! Funnily, they don't show you if they are running. For the ones in Office document macros you do get a warning (because of the macro) but I can tell you a gullible person will run the macro, because the subject of the e-mail/or body is normally so sweet/attractive/creates anxiety. Just for the kicks, at some client's office, I wrote a rudimentary batch script to backup a server. The script maps a network drive, does the backup by creating a dated file (compressed), then disconnects the network drive. That way if a user get's the server encrypted, the backup drive will not be encrypted. Why did I do this? Because ransomware checks even shared drives and encrypts them as long as it gets the write permissions. On 5 October 2016 at 21:17, Kennedy Aseda <samskid5@gmail.com> wrote:
Wash,
Is it possible an attacker can break into a server, escalate their privilege to root or admin, run the encryption tool on data directory then ask for ransom? Just a random thought.
Kennedy
On 5 Oct 2016 21:12, "Odhiambo Washington via skunkworks" < skunkworks@lists.my.co.ke> wrote:
Ransomware is NOT malware in the true sense of malware. Ransomware is more like you personally decide to run a program that encrypts your files, only this time it's not you :-) AFAICT, no antivirus will ever detect ransomware. Again, ransomware requires the user to be gullible enough to run it. Sorry Kevin.
On 5 October 2016 at 19:19, alex watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
anti malware did not prevent the attack?
On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hi Pals,
woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674 - README HTML Application
Anyone gotten this attack before?
*Kevin Ochieng'*
Skype : kevinjanabi Phone : +254 733229214 +254727217330
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft." _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

Does it need the user to be an administrator or it can execute when logged in as a regular user? Regards, Job Muriuki, Skype: heviejob On Wed, Oct 5, 2016 at 9:39 PM, Owen Sakawa via skunkworks < skunkworks@lists.my.co.ke> wrote:
Nice move ken
Warm Regards,
Owen Sakawa Tel: +254723060160 Skype: owen.sakawa
On Wed, Oct 5, 2016 at 9:31 PM +0300, "Odhiambo Washington via skunkworks" <skunkworks@lists.my.co.ke> wrote:
My answer is NO!
Someone must have opened the ransomware app and run it! Funnily, they don't show you if they are running. For the ones in Office document macros you do get a warning (because of the macro) but I can tell you a gullible person will run the macro, because the subject of the e-mail/or body is normally so sweet/attractive/creates anxiety.
Just for the kicks, at some client's office, I wrote a rudimentary batch script to backup a server. The script maps a network drive, does the backup by creating a dated file (compressed), then disconnects the network drive. That way if a user get's the server encrypted, the backup drive will not be encrypted. Why did I do this? Because ransomware checks even shared drives and encrypts them as long as it gets the write permissions.
On 5 October 2016 at 21:17, Kennedy Aseda <samskid5@gmail.com> wrote:
Wash,
Is it possible an attacker can break into a server, escalate their privilege to root or admin, run the encryption tool on data directory then ask for ransom? Just a random thought.
Kennedy
On 5 Oct 2016 21:12, "Odhiambo Washington via skunkworks" < skunkworks@lists.my.co.ke> wrote:
Ransomware is NOT malware in the true sense of malware. Ransomware is more like you personally decide to run a program that encrypts your files, only this time it's not you :-) AFAICT, no antivirus will ever detect ransomware. Again, ransomware requires the user to be gullible enough to run it. Sorry Kevin.
On 5 October 2016 at 19:19, alex watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
anti malware did not prevent the attack?
On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hi Pals,
woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674 - README HTML Application
Anyone gotten this attack before?
*Kevin Ochieng'*
Skype : kevinjanabi Phone : +254 733229214 +254727217330
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

I repeat, cerber ransomware does not need installation. I learnt its existence from one of my techies & raised a simillar argument of it not being able to encrypt files without being executed. I confirmed it on my own, with an isolated dummy pc, not once, not twice but thrice. As soon as a download is complete, it grabs all folders & encrypts them.
On Oct 5, 2016, at 9:45 PM, Job Muriuki via skunkworks <skunkworks@lists.my.co.ke> wrote:
Does it need the user to be an administrator or it can execute when logged in as a regular user?
Regards, Job Muriuki,
Skype: heviejob
On Wed, Oct 5, 2016 at 9:39 PM, Owen Sakawa via skunkworks <skunkworks@lists.my.co.ke> wrote: Nice move ken
Warm Regards,
Owen Sakawa Tel: +254723060160 Skype: owen.sakawa
On Wed, Oct 5, 2016 at 9:31 PM +0300, "Odhiambo Washington via skunkworks" <skunkworks@lists.my.co.ke> wrote:
My answer is NO!
Someone must have opened the ransomware app and run it! Funnily, they don't show you if they are running. For the ones in Office document macros you do get a warning (because of the macro) but I can tell you a gullible person will run the macro, because the subject of the e-mail/or body is normally so sweet/attractive/creates anxiety.
Just for the kicks, at some client's office, I wrote a rudimentary batch script to backup a server. The script maps a network drive, does the backup by creating a dated file (compressed), then disconnects the network drive. That way if a user get's the server encrypted, the backup drive will not be encrypted. Why did I do this? Because ransomware checks even shared drives and encrypts them as long as it gets the write permissions.
On 5 October 2016 at 21:17, Kennedy Aseda <samskid5@gmail.com> wrote: Wash,
Is it possible an attacker can break into a server, escalate their privilege to root or admin, run the encryption tool on data directory then ask for ransom? Just a random thought.
Kennedy
On 5 Oct 2016 21:12, "Odhiambo Washington via skunkworks" <skunkworks@lists.my.co.ke> wrote: Ransomware is NOT malware in the true sense of malware. Ransomware is more like you personally decide to run a program that encrypts your files, only this time it's not you :-) AFAICT, no antivirus will ever detect ransomware. Again, ransomware requires the user to be gullible enough to run it. Sorry Kevin.
On 5 October 2016 at 19:19, alex watila via skunkworks <skunkworks@lists.my.co.ke> wrote: anti malware did not prevent the attack?
On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks <skunkworks@lists.my.co.ke> wrote: Hi Pals,
woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674 - README HTML Application
Anyone gotten this attack before?
Kevin Ochieng'
Skype : kevinjanabi Phone : +254 733229214 +254727217330
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

Wash, Cerber ransomware needs no installation. It auto-runs as soon as its downloaded. Affected, tried & confirmed. Ammyy admin website is currently compromised, as soon as you finish downloading, all folders are wrapped up.
On Oct 5, 2016, at 9:06 PM, Odhiambo Washington via skunkworks <skunkworks@lists.my.co.ke> wrote:
Ransomware is NOT malware in the true sense of malware. Ransomware is more like you personally decide to run a program that encrypts your files, only this time it's not you :-) AFAICT, no antivirus will ever detect ransomware. Again, ransomware requires the user to be gullible enough to run it. Sorry Kevin.
On 5 October 2016 at 19:19, alex watila via skunkworks <skunkworks@lists.my.co.ke> wrote: anti malware did not prevent the attack?
On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks <skunkworks@lists.my.co.ke> wrote: Hi Pals,
woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674 - README HTML Application
Anyone gotten this attack before?
Kevin Ochieng'
Skype : kevinjanabi Phone : +254 733229214 +254727217330
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft." _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

Kaspersky can protect you https://blog.kaspersky.com/ransomware-protection-video/8765/ regards, Alex From: Odhiambo Washington [mailto:odhiambo@gmail.com] Sent: Wednesday, October 5, 2016 9:07 PM To: alex watila <awatila@yahoo.co.uk>; Skunkworks Mailing List <skunkworks@lists.my.co.ke> Cc: Kevin Ochieng <kevoti22@gmail.com> Subject: Re: [Skunkworks] How to Remove Ransomware Ransomware is NOT malware in the true sense of malware. Ransomware is more like you personally decide to run a program that encrypts your files, only this time it's not you :-) AFAICT, no antivirus will ever detect ransomware. Again, ransomware requires the user to be gullible enough to run it. Sorry Kevin. On 5 October 2016 at 19:19, alex watila via skunkworks <skunkworks@lists.my.co.ke <mailto:skunkworks@lists.my.co.ke> > wrote: anti malware did not prevent the attack? On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks <skunkworks@lists.my.co.ke <mailto:skunkworks@lists.my.co.ke> > wrote: Hi Pals, woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674 - README HTML Application Anyone gotten this attack before? Kevin Ochieng' Skype : kevinjanabi Phone : +254 733229214 +254727217330 _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke <mailto:skunkworks@lists.my.co.ke> ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24 <http://my.co.ke/phpbb/viewtopic.php?f=24&t=94> &t=94 ------------ Other services @ http://my.co.ke -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."

10 tips to protect your files from ransomware https://blog.kaspersky.com/ransomware-10-tips/10673/ From: Alex Watila [mailto:awatila@yahoo.co.uk] Sent: Thursday, October 6, 2016 6:12 AM To: 'Odhiambo Washington' <odhiambo@gmail.com>; 'Skunkworks Mailing List' <skunkworks@lists.my.co.ke> Cc: 'Kevin Ochieng' <kevoti22@gmail.com> Subject: RE: [Skunkworks] How to Remove Ransomware Kaspersky can protect you https://blog.kaspersky.com/ransomware-protection-video/8765/ regards, Alex From: Odhiambo Washington [mailto:odhiambo@gmail.com] Sent: Wednesday, October 5, 2016 9:07 PM To: alex watila <awatila@yahoo.co.uk <mailto:awatila@yahoo.co.uk> >; Skunkworks Mailing List <skunkworks@lists.my.co.ke <mailto:skunkworks@lists.my.co.ke> > Cc: Kevin Ochieng <kevoti22@gmail.com <mailto:kevoti22@gmail.com> > Subject: Re: [Skunkworks] How to Remove Ransomware Ransomware is NOT malware in the true sense of malware. Ransomware is more like you personally decide to run a program that encrypts your files, only this time it's not you :-) AFAICT, no antivirus will ever detect ransomware. Again, ransomware requires the user to be gullible enough to run it. Sorry Kevin. On 5 October 2016 at 19:19, alex watila via skunkworks <skunkworks@lists.my.co.ke <mailto:skunkworks@lists.my.co.ke> > wrote: anti malware did not prevent the attack? On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks <skunkworks@lists.my.co.ke <mailto:skunkworks@lists.my.co.ke> > wrote: Hi Pals, woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674 - README HTML Application Anyone gotten this attack before? Kevin Ochieng' Skype : kevinjanabi Phone : +254 733229214 +254727217330 _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke <mailto:skunkworks@lists.my.co.ke> ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24 <http://my.co.ke/phpbb/viewtopic.php?f=24&t=94> &t=94 ------------ Other services @ http://my.co.ke -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."

Try a new antiRansom product from Sophos. Try it for free Sophos Intercept X <https://secure2.sophos.com/en-us/products/intercept-x/free-trial.aspx> regards, Samson On Thu, Oct 6, 2016 at 6:14 AM, Alex Watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
*10 tips to protect your files from ransomware*
https://blog.kaspersky.com/ransomware-10-tips/10673/
*From:* Alex Watila [mailto:awatila@yahoo.co.uk] *Sent:* Thursday, October 6, 2016 6:12 AM *To:* 'Odhiambo Washington' <odhiambo@gmail.com>; 'Skunkworks Mailing List' <skunkworks@lists.my.co.ke> *Cc:* 'Kevin Ochieng' <kevoti22@gmail.com> *Subject:* RE: [Skunkworks] How to Remove Ransomware
Kaspersky can protect you
https://blog.kaspersky.com/ransomware-protection-video/8765/
regards,
Alex
*From:* Odhiambo Washington [mailto:odhiambo@gmail.com <odhiambo@gmail.com>] *Sent:* Wednesday, October 5, 2016 9:07 PM *To:* alex watila <awatila@yahoo.co.uk>; Skunkworks Mailing List < skunkworks@lists.my.co.ke> *Cc:* Kevin Ochieng <kevoti22@gmail.com> *Subject:* Re: [Skunkworks] How to Remove Ransomware
Ransomware is NOT malware in the true sense of malware. Ransomware is more like you personally decide to run a program that encrypts your files, only this time it's not you :-)
AFAICT, no antivirus will ever detect ransomware. Again, ransomware requires the user to be gullible enough to run it. Sorry Kevin.
On 5 October 2016 at 19:19, alex watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
anti malware did not prevent the attack?
On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hi Pals,
woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674
- README HTML Application
Anyone gotten this attack before?
*Kevin Ochieng'*
Skype : kevinjanabi
Phone : +254 733229214
+254727217330
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- ------------------------------------------------------------------------------------------------------- *Best Web Designs, Computer Repair, Installations,* *Networking, Training, and Sales!!!!!!!!!*

Hi Guys i have a PC hit by Ceber , but as much as i've been transfering tools to help in decrytping my laptop is still good , no antivirus just good old microsoft defender doing its job and stop aut run apps and having UAC at the recommended level , but anyhoo .. none of the online tools work, anyone with a success story? On Thu, Oct 6, 2016 at 12:43 PM, Samson Ogada via skunkworks < skunkworks@lists.my.co.ke> wrote:
Try a new antiRansom product from Sophos. Try it for free
Sophos Intercept X <https://secure2.sophos.com/en-us/products/intercept-x/free-trial.aspx>
regards,
Samson
On Thu, Oct 6, 2016 at 6:14 AM, Alex Watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
*10 tips to protect your files from ransomware*
https://blog.kaspersky.com/ransomware-10-tips/10673/
*From:* Alex Watila [mailto:awatila@yahoo.co.uk] *Sent:* Thursday, October 6, 2016 6:12 AM *To:* 'Odhiambo Washington' <odhiambo@gmail.com>; 'Skunkworks Mailing List' <skunkworks@lists.my.co.ke> *Cc:* 'Kevin Ochieng' <kevoti22@gmail.com> *Subject:* RE: [Skunkworks] How to Remove Ransomware
Kaspersky can protect you
https://blog.kaspersky.com/ransomware-protection-video/8765/
regards,
Alex
*From:* Odhiambo Washington [mailto:odhiambo@gmail.com <odhiambo@gmail.com>] *Sent:* Wednesday, October 5, 2016 9:07 PM *To:* alex watila <awatila@yahoo.co.uk>; Skunkworks Mailing List < skunkworks@lists.my.co.ke> *Cc:* Kevin Ochieng <kevoti22@gmail.com> *Subject:* Re: [Skunkworks] How to Remove Ransomware
Ransomware is NOT malware in the true sense of malware. Ransomware is more like you personally decide to run a program that encrypts your files, only this time it's not you :-)
AFAICT, no antivirus will ever detect ransomware. Again, ransomware requires the user to be gullible enough to run it. Sorry Kevin.
On 5 October 2016 at 19:19, alex watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
anti malware did not prevent the attack?
On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hi Pals,
woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674
- README HTML Application
Anyone gotten this attack before?
*Kevin Ochieng'*
Skype : kevinjanabi
Phone : +254 733229214
+254727217330
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- ------------------------------------------------------------ ------------------------------------------- *Best Web Designs, Computer Repair, Installations,* *Networking, Training, and Sales!!!!!!!!!*
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- GG

In this day and age how would you operate a computer without at least an antivirus / antimalware? Regards, Alex From: geoffrey gitagia [mailto:ggitagia@gmail.com] Sent: Monday, October 10, 2016 3:49 PM To: Samson Ogada <ogadas@gmail.com>; Skunkworks Mailing List <skunkworks@lists.my.co.ke> Cc: awatila@yahoo.co.uk Subject: Re: [Skunkworks] How to Remove Ransomware Hi Guys i have a PC hit by Ceber , but as much as i've been transfering tools to help in decrytping my laptop is still good , no antivirus just good old microsoft defender doing its job and stop aut run apps and having UAC at the recommended level , but anyhoo .. none of the online tools work, anyone with a success story? On Thu, Oct 6, 2016 at 12:43 PM, Samson Ogada via skunkworks <skunkworks@lists.my.co.ke <mailto:skunkworks@lists.my.co.ke> > wrote: Try a new antiRansom product from Sophos. Try it for free Sophos Intercept X <https://secure2.sophos.com/en-us/products/intercept-x/free-trial.aspx> regards, Samson On Thu, Oct 6, 2016 at 6:14 AM, Alex Watila via skunkworks <skunkworks@lists.my.co.ke <mailto:skunkworks@lists.my.co.ke> > wrote: 10 tips to protect your files from ransomware https://blog.kaspersky.com/ransomware-10-tips/10673/ From: Alex Watila [mailto:awatila@yahoo.co.uk <mailto:awatila@yahoo.co.uk> ] Sent: Thursday, October 6, 2016 6:12 AM To: 'Odhiambo Washington' <odhiambo@gmail.com <mailto:odhiambo@gmail.com> >; 'Skunkworks Mailing List' <skunkworks@lists.my.co.ke <mailto:skunkworks@lists.my.co.ke> > Cc: 'Kevin Ochieng' <kevoti22@gmail.com <mailto:kevoti22@gmail.com> > Subject: RE: [Skunkworks] How to Remove Ransomware Kaspersky can protect you https://blog.kaspersky.com/ransomware-protection-video/8765/ regards, Alex From: Odhiambo Washington [mailto:odhiambo@gmail.com] Sent: Wednesday, October 5, 2016 9:07 PM To: alex watila <awatila@yahoo.co.uk <mailto:awatila@yahoo.co.uk> >; Skunkworks Mailing List <skunkworks@lists.my.co.ke <mailto:skunkworks@lists.my.co.ke> > Cc: Kevin Ochieng <kevoti22@gmail.com <mailto:kevoti22@gmail.com> > Subject: Re: [Skunkworks] How to Remove Ransomware Ransomware is NOT malware in the true sense of malware. Ransomware is more like you personally decide to run a program that encrypts your files, only this time it's not you :-) AFAICT, no antivirus will ever detect ransomware. Again, ransomware requires the user to be gullible enough to run it. Sorry Kevin. On 5 October 2016 at 19:19, alex watila via skunkworks <skunkworks@lists.my.co.ke <mailto:skunkworks@lists.my.co.ke> > wrote: anti malware did not prevent the attack? On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks <skunkworks@lists.my.co.ke <mailto:skunkworks@lists.my.co.ke> > wrote: Hi Pals, woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674 - README HTML Application Anyone gotten this attack before? Kevin Ochieng' Skype : kevinjanabi Phone : +254 733229214 <tel:%2B254%20733229214> +254727217330 <tel:%2B254727217330> _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke <mailto:skunkworks@lists.my.co.ke> ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24 <http://my.co.ke/phpbb/viewtopic.php?f=24&t=94> &t=94 ------------ Other services @ http://my.co.ke -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft." _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke <mailto:skunkworks@lists.my.co.ke> ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24 <http://my.co.ke/phpbb/viewtopic.php?f=24&t=94> &t=94 ------------ Other services @ http://my.co.ke -- ------------------------------------------------------------------------------------------------------- Best Web Designs, Computer Repair, Installations, Networking, Training, and Sales!!!!!!!!! _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke <mailto:skunkworks@lists.my.co.ke> ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24 <http://my.co.ke/phpbb/viewtopic.php?f=24&t=94> &t=94 ------------ Other services @ http://my.co.ke -- GG

If you knew that in this day and age.. Good online safety practice is what will help you.. Else antivirus can be compromised.. just like the box I have that got hit. On 10 Oct 2016 4:11 PM, "Alex Watila" <awatila@yahoo.co.uk> wrote:
In this day and age how would you operate a computer without at least an antivirus / antimalware?
Regards,
Alex
*From:* geoffrey gitagia [mailto:ggitagia@gmail.com] *Sent:* Monday, October 10, 2016 3:49 PM *To:* Samson Ogada <ogadas@gmail.com>; Skunkworks Mailing List < skunkworks@lists.my.co.ke> *Cc:* awatila@yahoo.co.uk *Subject:* Re: [Skunkworks] How to Remove Ransomware
Hi Guys
i have a PC hit by Ceber , but as much as i've been transfering tools to help in decrytping my laptop is still good , no antivirus just good old microsoft defender doing its job and stop aut run apps and having UAC at the recommended level , but anyhoo .. none of the online tools work, anyone with a success story?
On Thu, Oct 6, 2016 at 12:43 PM, Samson Ogada via skunkworks < skunkworks@lists.my.co.ke> wrote:
Try a new antiRansom product from Sophos. Try it for free
Sophos Intercept X <https://secure2.sophos.com/en-us/products/intercept-x/free-trial.aspx>
regards,
Samson
On Thu, Oct 6, 2016 at 6:14 AM, Alex Watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
*10 tips to protect your files from ransomware*
https://blog.kaspersky.com/ransomware-10-tips/10673/
*From:* Alex Watila [mailto:awatila@yahoo.co.uk] *Sent:* Thursday, October 6, 2016 6:12 AM *To:* 'Odhiambo Washington' <odhiambo@gmail.com>; 'Skunkworks Mailing List' <skunkworks@lists.my.co.ke> *Cc:* 'Kevin Ochieng' <kevoti22@gmail.com> *Subject:* RE: [Skunkworks] How to Remove Ransomware
Kaspersky can protect you
https://blog.kaspersky.com/ransomware-protection-video/8765/
regards,
Alex
*From:* Odhiambo Washington [mailto:odhiambo@gmail.com <odhiambo@gmail.com>] *Sent:* Wednesday, October 5, 2016 9:07 PM *To:* alex watila <awatila@yahoo.co.uk>; Skunkworks Mailing List < skunkworks@lists.my.co.ke> *Cc:* Kevin Ochieng <kevoti22@gmail.com> *Subject:* Re: [Skunkworks] How to Remove Ransomware
Ransomware is NOT malware in the true sense of malware. Ransomware is more like you personally decide to run a program that encrypts your files, only this time it's not you :-)
AFAICT, no antivirus will ever detect ransomware. Again, ransomware requires the user to be gullible enough to run it. Sorry Kevin.
On 5 October 2016 at 19:19, alex watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
anti malware did not prevent the attack?
On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hi Pals,
woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674
- README HTML Application
Anyone gotten this attack before?
*Kevin Ochieng'*
Skype : kevinjanabi
Phone : +254 733229214
+254727217330
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
------------------------------------------------------------ -------------------------------------------
*Best Web Designs, Computer Repair, Installations,*
*Networking, Training, and Sales!!!!!!!!!*
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
GG

Alex, it's very possible, if you know what you are doing! On 10 October 2016 at 16:11, Alex Watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
In this day and age how would you operate a computer without at least an antivirus / antimalware?
Regards,
Alex
*From:* geoffrey gitagia [mailto:ggitagia@gmail.com] *Sent:* Monday, October 10, 2016 3:49 PM *To:* Samson Ogada <ogadas@gmail.com>; Skunkworks Mailing List < skunkworks@lists.my.co.ke> *Cc:* awatila@yahoo.co.uk
*Subject:* Re: [Skunkworks] How to Remove Ransomware
Hi Guys
i have a PC hit by Ceber , but as much as i've been transfering tools to help in decrytping my laptop is still good , no antivirus just good old microsoft defender doing its job and stop aut run apps and having UAC at the recommended level , but anyhoo .. none of the online tools work, anyone with a success story?
On Thu, Oct 6, 2016 at 12:43 PM, Samson Ogada via skunkworks < skunkworks@lists.my.co.ke> wrote:
Try a new antiRansom product from Sophos. Try it for free
Sophos Intercept X <https://secure2.sophos.com/en-us/products/intercept-x/free-trial.aspx>
regards,
Samson
On Thu, Oct 6, 2016 at 6:14 AM, Alex Watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
*10 tips to protect your files from ransomware*
https://blog.kaspersky.com/ransomware-10-tips/10673/
*From:* Alex Watila [mailto:awatila@yahoo.co.uk] *Sent:* Thursday, October 6, 2016 6:12 AM *To:* 'Odhiambo Washington' <odhiambo@gmail.com>; 'Skunkworks Mailing List' <skunkworks@lists.my.co.ke> *Cc:* 'Kevin Ochieng' <kevoti22@gmail.com> *Subject:* RE: [Skunkworks] How to Remove Ransomware
Kaspersky can protect you
https://blog.kaspersky.com/ransomware-protection-video/8765/
regards,
Alex
*From:* Odhiambo Washington [mailto:odhiambo@gmail.com <odhiambo@gmail.com>] *Sent:* Wednesday, October 5, 2016 9:07 PM *To:* alex watila <awatila@yahoo.co.uk>; Skunkworks Mailing List < skunkworks@lists.my.co.ke> *Cc:* Kevin Ochieng <kevoti22@gmail.com> *Subject:* Re: [Skunkworks] How to Remove Ransomware
Ransomware is NOT malware in the true sense of malware. Ransomware is more like you personally decide to run a program that encrypts your files, only this time it's not you :-)
AFAICT, no antivirus will ever detect ransomware. Again, ransomware requires the user to be gullible enough to run it. Sorry Kevin.
On 5 October 2016 at 19:19, alex watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
anti malware did not prevent the attack?
On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hi Pals,
woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674
- README HTML Application
Anyone gotten this attack before?
*Kevin Ochieng'*
Skype : kevinjanabi
Phone : +254 733229214
+254727217330
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
------------------------------------------------------------ -------------------------------------------
*Best Web Designs, Computer Repair, Installations,*
*Networking, Training, and Sales!!!!!!!!!*
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
GG
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."

@marcus ..lmao.. I work in a building named orbit.. Haya basi lemme advise peeps to shed tears. On 10 Oct 2016 5:49 PM, "Odhiambo Washington" <odhiambo@gmail.com> wrote:
Alex, it's very possible, if you know what you are doing!
On 10 October 2016 at 16:11, Alex Watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
In this day and age how would you operate a computer without at least an antivirus / antimalware?
Regards,
Alex
*From:* geoffrey gitagia [mailto:ggitagia@gmail.com] *Sent:* Monday, October 10, 2016 3:49 PM *To:* Samson Ogada <ogadas@gmail.com>; Skunkworks Mailing List < skunkworks@lists.my.co.ke> *Cc:* awatila@yahoo.co.uk
*Subject:* Re: [Skunkworks] How to Remove Ransomware
Hi Guys
i have a PC hit by Ceber , but as much as i've been transfering tools to help in decrytping my laptop is still good , no antivirus just good old microsoft defender doing its job and stop aut run apps and having UAC at the recommended level , but anyhoo .. none of the online tools work, anyone with a success story?
On Thu, Oct 6, 2016 at 12:43 PM, Samson Ogada via skunkworks < skunkworks@lists.my.co.ke> wrote:
Try a new antiRansom product from Sophos. Try it for free
Sophos Intercept X <https://secure2.sophos.com/en-us/products/intercept-x/free-trial.aspx>
regards,
Samson
On Thu, Oct 6, 2016 at 6:14 AM, Alex Watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
*10 tips to protect your files from ransomware*
https://blog.kaspersky.com/ransomware-10-tips/10673/
*From:* Alex Watila [mailto:awatila@yahoo.co.uk] *Sent:* Thursday, October 6, 2016 6:12 AM *To:* 'Odhiambo Washington' <odhiambo@gmail.com>; 'Skunkworks Mailing List' <skunkworks@lists.my.co.ke> *Cc:* 'Kevin Ochieng' <kevoti22@gmail.com> *Subject:* RE: [Skunkworks] How to Remove Ransomware
Kaspersky can protect you
https://blog.kaspersky.com/ransomware-protection-video/8765/
regards,
Alex
*From:* Odhiambo Washington [mailto:odhiambo@gmail.com <odhiambo@gmail.com>] *Sent:* Wednesday, October 5, 2016 9:07 PM *To:* alex watila <awatila@yahoo.co.uk>; Skunkworks Mailing List < skunkworks@lists.my.co.ke> *Cc:* Kevin Ochieng <kevoti22@gmail.com> *Subject:* Re: [Skunkworks] How to Remove Ransomware
Ransomware is NOT malware in the true sense of malware. Ransomware is more like you personally decide to run a program that encrypts your files, only this time it's not you :-)
AFAICT, no antivirus will ever detect ransomware. Again, ransomware requires the user to be gullible enough to run it. Sorry Kevin.
On 5 October 2016 at 19:19, alex watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
anti malware did not prevent the attack?
On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hi Pals,
woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674
- README HTML Application
Anyone gotten this attack before?
*Kevin Ochieng'*
Skype : kevinjanabi
Phone : +254 733229214
+254727217330
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
------------------------------------------------------------ -------------------------------------------
*Best Web Designs, Computer Repair, Installations,*
*Networking, Training, and Sales!!!!!!!!!*
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
GG
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."

You May try this site : https://www.nomoreransom.org/ good luck On Mon, Oct 10, 2016 at 8:29 PM, geoffrey gitagia via skunkworks < skunkworks@lists.my.co.ke> wrote:
@marcus ..lmao.. I work in a building named orbit.. Haya basi lemme advise peeps to shed tears.
On 10 Oct 2016 5:49 PM, "Odhiambo Washington" <odhiambo@gmail.com> wrote:
Alex, it's very possible, if you know what you are doing!
On 10 October 2016 at 16:11, Alex Watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
In this day and age how would you operate a computer without at least an antivirus / antimalware?
Regards,
Alex
*From:* geoffrey gitagia [mailto:ggitagia@gmail.com] *Sent:* Monday, October 10, 2016 3:49 PM *To:* Samson Ogada <ogadas@gmail.com>; Skunkworks Mailing List < skunkworks@lists.my.co.ke> *Cc:* awatila@yahoo.co.uk
*Subject:* Re: [Skunkworks] How to Remove Ransomware
Hi Guys
i have a PC hit by Ceber , but as much as i've been transfering tools to help in decrytping my laptop is still good , no antivirus just good old microsoft defender doing its job and stop aut run apps and having UAC at the recommended level , but anyhoo .. none of the online tools work, anyone with a success story?
On Thu, Oct 6, 2016 at 12:43 PM, Samson Ogada via skunkworks < skunkworks@lists.my.co.ke> wrote:
Try a new antiRansom product from Sophos. Try it for free
Sophos Intercept X <https://secure2.sophos.com/en-us/products/intercept-x/free-trial.aspx>
regards,
Samson
On Thu, Oct 6, 2016 at 6:14 AM, Alex Watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
*10 tips to protect your files from ransomware*
https://blog.kaspersky.com/ransomware-10-tips/10673/
*From:* Alex Watila [mailto:awatila@yahoo.co.uk] *Sent:* Thursday, October 6, 2016 6:12 AM *To:* 'Odhiambo Washington' <odhiambo@gmail.com>; 'Skunkworks Mailing List' <skunkworks@lists.my.co.ke> *Cc:* 'Kevin Ochieng' <kevoti22@gmail.com> *Subject:* RE: [Skunkworks] How to Remove Ransomware
Kaspersky can protect you
https://blog.kaspersky.com/ransomware-protection-video/8765/
regards,
Alex
*From:* Odhiambo Washington [mailto:odhiambo@gmail.com <odhiambo@gmail.com>] *Sent:* Wednesday, October 5, 2016 9:07 PM *To:* alex watila <awatila@yahoo.co.uk>; Skunkworks Mailing List < skunkworks@lists.my.co.ke> *Cc:* Kevin Ochieng <kevoti22@gmail.com> *Subject:* Re: [Skunkworks] How to Remove Ransomware
Ransomware is NOT malware in the true sense of malware. Ransomware is more like you personally decide to run a program that encrypts your files, only this time it's not you :-)
AFAICT, no antivirus will ever detect ransomware. Again, ransomware requires the user to be gullible enough to run it. Sorry Kevin.
On 5 October 2016 at 19:19, alex watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
anti malware did not prevent the attack?
On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hi Pals,
woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674
- README HTML Application
Anyone gotten this attack before?
*Kevin Ochieng'*
Skype : kevinjanabi
Phone : +254 733229214
+254727217330
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
------------------------------------------------------------ -------------------------------------------
*Best Web Designs, Computer Repair, Installations,*
*Networking, Training, and Sales!!!!!!!!!*
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
GG
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

Jiddah, Does that link work - as in do they decrypt your files? On 11 October 2016 at 08:06, Jiddah Konso via skunkworks < skunkworks@lists.my.co.ke> wrote:
You May try this site : https://www.nomoreransom.org/
good luck
On Mon, Oct 10, 2016 at 8:29 PM, geoffrey gitagia via skunkworks < skunkworks@lists.my.co.ke> wrote:
@marcus ..lmao.. I work in a building named orbit.. Haya basi lemme advise peeps to shed tears.
On 10 Oct 2016 5:49 PM, "Odhiambo Washington" <odhiambo@gmail.com> wrote:
Alex, it's very possible, if you know what you are doing!
On 10 October 2016 at 16:11, Alex Watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
In this day and age how would you operate a computer without at least an antivirus / antimalware?
Regards,
Alex
*From:* geoffrey gitagia [mailto:ggitagia@gmail.com] *Sent:* Monday, October 10, 2016 3:49 PM *To:* Samson Ogada <ogadas@gmail.com>; Skunkworks Mailing List < skunkworks@lists.my.co.ke> *Cc:* awatila@yahoo.co.uk
*Subject:* Re: [Skunkworks] How to Remove Ransomware
Hi Guys
i have a PC hit by Ceber , but as much as i've been transfering tools to help in decrytping my laptop is still good , no antivirus just good old microsoft defender doing its job and stop aut run apps and having UAC at the recommended level , but anyhoo .. none of the online tools work, anyone with a success story?
On Thu, Oct 6, 2016 at 12:43 PM, Samson Ogada via skunkworks < skunkworks@lists.my.co.ke> wrote:
Try a new antiRansom product from Sophos. Try it for free
Sophos Intercept X <https://secure2.sophos.com/en-us/products/intercept-x/free-trial.aspx>
regards,
Samson
On Thu, Oct 6, 2016 at 6:14 AM, Alex Watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
*10 tips to protect your files from ransomware*
https://blog.kaspersky.com/ransomware-10-tips/10673/
*From:* Alex Watila [mailto:awatila@yahoo.co.uk] *Sent:* Thursday, October 6, 2016 6:12 AM *To:* 'Odhiambo Washington' <odhiambo@gmail.com>; 'Skunkworks Mailing List' <skunkworks@lists.my.co.ke> *Cc:* 'Kevin Ochieng' <kevoti22@gmail.com> *Subject:* RE: [Skunkworks] How to Remove Ransomware
Kaspersky can protect you
https://blog.kaspersky.com/ransomware-protection-video/8765/
regards,
Alex
*From:* Odhiambo Washington [mailto:odhiambo@gmail.com <odhiambo@gmail.com>] *Sent:* Wednesday, October 5, 2016 9:07 PM *To:* alex watila <awatila@yahoo.co.uk>; Skunkworks Mailing List < skunkworks@lists.my.co.ke> *Cc:* Kevin Ochieng <kevoti22@gmail.com> *Subject:* Re: [Skunkworks] How to Remove Ransomware
Ransomware is NOT malware in the true sense of malware. Ransomware is more like you personally decide to run a program that encrypts your files, only this time it's not you :-)
AFAICT, no antivirus will ever detect ransomware. Again, ransomware requires the user to be gullible enough to run it. Sorry Kevin.
On 5 October 2016 at 19:19, alex watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
anti malware did not prevent the attack?
On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hi Pals,
woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674
- README HTML Application
Anyone gotten this attack before?
*Kevin Ochieng'*
Skype : kevinjanabi
Phone : +254 733229214
+254727217330
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
------------------------------------------------------------ -------------------------------------------
*Best Web Designs, Computer Repair, Installations,*
*Networking, Training, and Sales!!!!!!!!!*
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
GG
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."

Try Sophos Intercept-X, a new malware intercept tool from Sophos, that takes care of Ransomware. And another Bonga point, is that it runs along side any other Endpoint Security Solution (antivirus) that you may already have. Check the product out below https://www.sophos.com/en-us/products/intercept-x.aspx contact me for more info rgds, Samson On Tue, Oct 11, 2016 at 10:43 AM, Odhiambo Washington via skunkworks < skunkworks@lists.my.co.ke> wrote:
Jiddah,
Does that link work - as in do they decrypt your files?
On 11 October 2016 at 08:06, Jiddah Konso via skunkworks < skunkworks@lists.my.co.ke> wrote:
You May try this site : https://www.nomoreransom.org/
good luck
On Mon, Oct 10, 2016 at 8:29 PM, geoffrey gitagia via skunkworks < skunkworks@lists.my.co.ke> wrote:
@marcus ..lmao.. I work in a building named orbit.. Haya basi lemme advise peeps to shed tears.
On 10 Oct 2016 5:49 PM, "Odhiambo Washington" <odhiambo@gmail.com> wrote:
Alex, it's very possible, if you know what you are doing!
On 10 October 2016 at 16:11, Alex Watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
In this day and age how would you operate a computer without at least an antivirus / antimalware?
Regards,
Alex
*From:* geoffrey gitagia [mailto:ggitagia@gmail.com] *Sent:* Monday, October 10, 2016 3:49 PM *To:* Samson Ogada <ogadas@gmail.com>; Skunkworks Mailing List < skunkworks@lists.my.co.ke> *Cc:* awatila@yahoo.co.uk
*Subject:* Re: [Skunkworks] How to Remove Ransomware
Hi Guys
i have a PC hit by Ceber , but as much as i've been transfering tools to help in decrytping my laptop is still good , no antivirus just good old microsoft defender doing its job and stop aut run apps and having UAC at the recommended level , but anyhoo .. none of the online tools work, anyone with a success story?
On Thu, Oct 6, 2016 at 12:43 PM, Samson Ogada via skunkworks < skunkworks@lists.my.co.ke> wrote:
Try a new antiRansom product from Sophos. Try it for free
Sophos Intercept X <https://secure2.sophos.com/en-us/products/intercept-x/free-trial.aspx>
regards,
Samson
On Thu, Oct 6, 2016 at 6:14 AM, Alex Watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
*10 tips to protect your files from ransomware*
https://blog.kaspersky.com/ransomware-10-tips/10673/
*From:* Alex Watila [mailto:awatila@yahoo.co.uk] *Sent:* Thursday, October 6, 2016 6:12 AM *To:* 'Odhiambo Washington' <odhiambo@gmail.com>; 'Skunkworks Mailing List' <skunkworks@lists.my.co.ke> *Cc:* 'Kevin Ochieng' <kevoti22@gmail.com> *Subject:* RE: [Skunkworks] How to Remove Ransomware
Kaspersky can protect you
https://blog.kaspersky.com/ransomware-protection-video/8765/
regards,
Alex
*From:* Odhiambo Washington [mailto:odhiambo@gmail.com <odhiambo@gmail.com>] *Sent:* Wednesday, October 5, 2016 9:07 PM *To:* alex watila <awatila@yahoo.co.uk>; Skunkworks Mailing List < skunkworks@lists.my.co.ke> *Cc:* Kevin Ochieng <kevoti22@gmail.com> *Subject:* Re: [Skunkworks] How to Remove Ransomware
Ransomware is NOT malware in the true sense of malware. Ransomware is more like you personally decide to run a program that encrypts your files, only this time it's not you :-)
AFAICT, no antivirus will ever detect ransomware. Again, ransomware requires the user to be gullible enough to run it. Sorry Kevin.
On 5 October 2016 at 19:19, alex watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
anti malware did not prevent the attack?
On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hi Pals,
woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674
- README HTML Application
Anyone gotten this attack before?
*Kevin Ochieng'*
Skype : kevinjanabi
Phone : +254 733229214
+254727217330
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
------------------------------------------------------------ -------------------------------------------
*Best Web Designs, Computer Repair, Installations,*
*Networking, Training, and Sales!!!!!!!!!*
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
GG
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- ------------------------------------------------------------------------------------------------------- *Best Web Designs, Computer Repair, Installations,* *Networking, Training, and Sales!!!!!!!!!*

Hi Samson, Sophos intercept doesnt work as well.There is no any remedy now i guess. *Kevin Ochieng'* Skype : kevinjanabi Phone : +254 733229214 +254727217330 On Tue, Oct 11, 2016 at 11:13 AM, Samson Ogada via skunkworks < skunkworks@lists.my.co.ke> wrote:
Try Sophos Intercept-X, a new malware intercept tool from Sophos, that takes care of Ransomware. And another Bonga point, is that it runs along side any other Endpoint Security Solution (antivirus) that you may already have. Check the product out below
https://www.sophos.com/en-us/products/intercept-x.aspx
contact me for more info
rgds,
Samson
On Tue, Oct 11, 2016 at 10:43 AM, Odhiambo Washington via skunkworks < skunkworks@lists.my.co.ke> wrote:
Jiddah,
Does that link work - as in do they decrypt your files?
On 11 October 2016 at 08:06, Jiddah Konso via skunkworks < skunkworks@lists.my.co.ke> wrote:
You May try this site : https://www.nomoreransom.org/
good luck
On Mon, Oct 10, 2016 at 8:29 PM, geoffrey gitagia via skunkworks < skunkworks@lists.my.co.ke> wrote:
@marcus ..lmao.. I work in a building named orbit.. Haya basi lemme advise peeps to shed tears.
On 10 Oct 2016 5:49 PM, "Odhiambo Washington" <odhiambo@gmail.com> wrote:
Alex, it's very possible, if you know what you are doing!
On 10 October 2016 at 16:11, Alex Watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
In this day and age how would you operate a computer without at least an antivirus / antimalware?
Regards,
Alex
*From:* geoffrey gitagia [mailto:ggitagia@gmail.com] *Sent:* Monday, October 10, 2016 3:49 PM *To:* Samson Ogada <ogadas@gmail.com>; Skunkworks Mailing List < skunkworks@lists.my.co.ke> *Cc:* awatila@yahoo.co.uk
*Subject:* Re: [Skunkworks] How to Remove Ransomware
Hi Guys
i have a PC hit by Ceber , but as much as i've been transfering tools to help in decrytping my laptop is still good , no antivirus just good old microsoft defender doing its job and stop aut run apps and having UAC at the recommended level , but anyhoo .. none of the online tools work, anyone with a success story?
On Thu, Oct 6, 2016 at 12:43 PM, Samson Ogada via skunkworks < skunkworks@lists.my.co.ke> wrote:
Try a new antiRansom product from Sophos. Try it for free
Sophos Intercept X <https://secure2.sophos.com/en-us/products/intercept-x/free-trial.aspx>
regards,
Samson
On Thu, Oct 6, 2016 at 6:14 AM, Alex Watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
*10 tips to protect your files from ransomware*
https://blog.kaspersky.com/ransomware-10-tips/10673/
*From:* Alex Watila [mailto:awatila@yahoo.co.uk] *Sent:* Thursday, October 6, 2016 6:12 AM *To:* 'Odhiambo Washington' <odhiambo@gmail.com>; 'Skunkworks Mailing List' <skunkworks@lists.my.co.ke> *Cc:* 'Kevin Ochieng' <kevoti22@gmail.com> *Subject:* RE: [Skunkworks] How to Remove Ransomware
Kaspersky can protect you
https://blog.kaspersky.com/ransomware-protection-video/8765/
regards,
Alex
*From:* Odhiambo Washington [mailto:odhiambo@gmail.com <odhiambo@gmail.com>] *Sent:* Wednesday, October 5, 2016 9:07 PM *To:* alex watila <awatila@yahoo.co.uk>; Skunkworks Mailing List < skunkworks@lists.my.co.ke> *Cc:* Kevin Ochieng <kevoti22@gmail.com> *Subject:* Re: [Skunkworks] How to Remove Ransomware
Ransomware is NOT malware in the true sense of malware. Ransomware is more like you personally decide to run a program that encrypts your files, only this time it's not you :-)
AFAICT, no antivirus will ever detect ransomware. Again, ransomware requires the user to be gullible enough to run it. Sorry Kevin.
On 5 October 2016 at 19:19, alex watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
anti malware did not prevent the attack?
On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hi Pals,
woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674
- README HTML Application
Anyone gotten this attack before?
*Kevin Ochieng'*
Skype : kevinjanabi
Phone : +254 733229214
+254727217330
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
------------------------------------------------------------ -------------------------------------------
*Best Web Designs, Computer Repair, Installations,*
*Networking, Training, and Sales!!!!!!!!!*
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
GG
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- ------------------------------------------------------------ ------------------------------------------- *Best Web Designs, Computer Repair, Installations,* *Networking, Training, and Sales!!!!!!!!!*
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

yes it does for the listed ransomeware name. On Tue, Oct 11, 2016 at 10:43 AM, Odhiambo Washington via skunkworks < skunkworks@lists.my.co.ke> wrote:
Jiddah,
Does that link work - as in do they decrypt your files?
On 11 October 2016 at 08:06, Jiddah Konso via skunkworks < skunkworks@lists.my.co.ke> wrote:
You May try this site : https://www.nomoreransom.org/
good luck
On Mon, Oct 10, 2016 at 8:29 PM, geoffrey gitagia via skunkworks < skunkworks@lists.my.co.ke> wrote:
@marcus ..lmao.. I work in a building named orbit.. Haya basi lemme advise peeps to shed tears.
On 10 Oct 2016 5:49 PM, "Odhiambo Washington" <odhiambo@gmail.com> wrote:
Alex, it's very possible, if you know what you are doing!
On 10 October 2016 at 16:11, Alex Watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
In this day and age how would you operate a computer without at least an antivirus / antimalware?
Regards,
Alex
*From:* geoffrey gitagia [mailto:ggitagia@gmail.com] *Sent:* Monday, October 10, 2016 3:49 PM *To:* Samson Ogada <ogadas@gmail.com>; Skunkworks Mailing List < skunkworks@lists.my.co.ke> *Cc:* awatila@yahoo.co.uk
*Subject:* Re: [Skunkworks] How to Remove Ransomware
Hi Guys
i have a PC hit by Ceber , but as much as i've been transfering tools to help in decrytping my laptop is still good , no antivirus just good old microsoft defender doing its job and stop aut run apps and having UAC at the recommended level , but anyhoo .. none of the online tools work, anyone with a success story?
On Thu, Oct 6, 2016 at 12:43 PM, Samson Ogada via skunkworks < skunkworks@lists.my.co.ke> wrote:
Try a new antiRansom product from Sophos. Try it for free
Sophos Intercept X <https://secure2.sophos.com/en-us/products/intercept-x/free-trial.aspx>
regards,
Samson
On Thu, Oct 6, 2016 at 6:14 AM, Alex Watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
*10 tips to protect your files from ransomware*
https://blog.kaspersky.com/ransomware-10-tips/10673/
*From:* Alex Watila [mailto:awatila@yahoo.co.uk] *Sent:* Thursday, October 6, 2016 6:12 AM *To:* 'Odhiambo Washington' <odhiambo@gmail.com>; 'Skunkworks Mailing List' <skunkworks@lists.my.co.ke> *Cc:* 'Kevin Ochieng' <kevoti22@gmail.com> *Subject:* RE: [Skunkworks] How to Remove Ransomware
Kaspersky can protect you
https://blog.kaspersky.com/ransomware-protection-video/8765/
regards,
Alex
*From:* Odhiambo Washington [mailto:odhiambo@gmail.com <odhiambo@gmail.com>] *Sent:* Wednesday, October 5, 2016 9:07 PM *To:* alex watila <awatila@yahoo.co.uk>; Skunkworks Mailing List < skunkworks@lists.my.co.ke> *Cc:* Kevin Ochieng <kevoti22@gmail.com> *Subject:* Re: [Skunkworks] How to Remove Ransomware
Ransomware is NOT malware in the true sense of malware. Ransomware is more like you personally decide to run a program that encrypts your files, only this time it's not you :-)
AFAICT, no antivirus will ever detect ransomware. Again, ransomware requires the user to be gullible enough to run it. Sorry Kevin.
On 5 October 2016 at 19:19, alex watila via skunkworks < skunkworks@lists.my.co.ke> wrote:
anti malware did not prevent the attack?
On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hi Pals,
woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674
- README HTML Application
Anyone gotten this attack before?
*Kevin Ochieng'*
Skype : kevinjanabi
Phone : +254 733229214
+254727217330
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
------------------------------------------------------------ -------------------------------------------
*Best Web Designs, Computer Repair, Installations,*
*Networking, Training, and Sales!!!!!!!!!*
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
GG
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

At present no known decryption tool exists for Cerber. -------- Original Message -------- Subject: Re: [Skunkworks] How to Remove Ransomware Local Time: 10 October 2016 3:49 PM UTC Time: 10 October 2016 12:49 From: skunkworks@lists.my.co.ke To: Samson Ogada <ogadas@gmail.com>, Skunkworks Mailing List <skunkworks@lists.my.co.ke> Hi Guys i have a PC hit by Ceber , but as much as i've been transfering tools to help in decrytping my laptop is still good , no antivirus just good old microsoft defender doing its job and stop aut run apps and having UAC at the recommended level , but anyhoo .. none of the online tools work, anyone with a success story? On Thu, Oct 6, 2016 at 12:43 PM, Samson Ogada via skunkworks <skunkworks@lists.my.co.ke> wrote: Try a new antiRansom product from Sophos. Try it for free [Sophos Intercept X](https://secure2.sophos.com/en-us/products/intercept-x/free-trial.aspx) regards, Samson On Thu, Oct 6, 2016 at 6:14 AM, Alex Watila via skunkworks <skunkworks@lists.my.co.ke> wrote: 10 tips to protect your files from ransomware https://blog.kaspersky.com/ransomware-10-tips/10673/ From: Alex Watila [mailto:awatila@yahoo.co.uk] Sent: Thursday, October 6, 2016 6:12 AM To: 'Odhiambo Washington' <odhiambo@gmail.com>; 'Skunkworks Mailing List' <skunkworks@lists.my.co.ke> Cc: 'Kevin Ochieng' <kevoti22@gmail.com> Subject: RE: [Skunkworks] How to Remove Ransomware Kaspersky can protect you https://blog.kaspersky.com/ransomware-protection-video/8765/ regards, Alex From: Odhiambo Washington [mailto:odhiambo@gmail.com] Sent: Wednesday, October 5, 2016 9:07 PM To: alex watila <awatila@yahoo.co.uk>; Skunkworks Mailing List <skunkworks@lists.my.co.ke> Cc: Kevin Ochieng <kevoti22@gmail.com> Subject: Re: [Skunkworks] How to Remove Ransomware Ransomware is NOT malware in the true sense of malware. Ransomware is more like you personally decide to run a program that encrypts your files, only this time it's not you :-) AFAICT, no antivirus will ever detect ransomware. Again, ransomware requires the user to be gullible enough to run it. Sorry Kevin. On 5 October 2016 at 19:19, alex watila via skunkworks <skunkworks@lists.my.co.ke> wrote: anti malware did not prevent the attack? On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks <skunkworks@lists.my.co.ke> wrote: Hi Pals, woke up today moring only to realise that all my folders in the server were affected and replaced by - SJAWv2LVfy.b674 - README HTML Application Anyone gotten this attack before? Kevin Ochieng' Skype : kevinjanabi Phone : [+254 733229214](tel:%2B254%20733229214) [+254727217330](tel:%2B254727217330) _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft." _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke -- ------------------------------------------------------------------------------------------------------- Best Web Designs, Computer Repair, Installations, Networking, Training, and Sales!!!!!!!!! _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke -- GG
participants (13)
-
alex watila
-
charles kungu
-
geoffrey gitagia
-
Jiddah Konso
-
Job Muriuki
-
Kennedy Aseda
-
Kevin Ochieng
-
Maisiba Bravo
-
Marcus Cicero
-
Marcus.cicero
-
Odhiambo Washington
-
owen.sakawa@outlook.com
-
Samson Ogada