Ransomware - a few details and tips.

What is ransomware?

Ransomware is a type of virus or malware that affects important files on your computer.  Basically once the malicious code is run, it takes many common file types and encrypts them so they are locked and rendered inaccessible.  After some time you will generally receive a message to notify you of the encryption and an offer to allow you to regain access to your files if you pay the ransom.  Instructions will be provided and if you don't follow those prompts and pay the ransom, you will lose access to those files permanently.

How does ransomware infect my computer?

Although this type of malware can be distributed in many different ways, one of the most common ways is through Spam email.  Victims are tricked into downloading an email attachment or clicking a link inside an email that appears to be legitimate, and in this way the malicious code is run on your computer.  This is why it's very important to have a good Spam filter in place and to also be very cautious about opening emails, their attachments or links if you even have the slightest feeling that they may not come from the source they appear to have initiated from.

Another way that ransomware can infect your computer is through an exploit kit.  These packages can be attracted from a legitimate website that has been infected and they detect vulnerabilities in your system which allows ransomware to be installed.  Sometimes this approach does not require action from the victim and therefore it's essential to have good malware protection on your devices.

Should I pay the ransom?

We never recommend to give money to thieves - you are basically dealing with data thieves here.  The problem with paying the ransom is that you are feeding the hackers, allowing them to invest more time and energy into creating more sophisticated ransomware.  Of course it is essential to know that your data will not be recoverable if you don't pay the ransom, but there is always the possibility that even if you pay the ransom the decryption key you are provided may not work to unlock your files.

Can ransomware be prevented?

As this is an ever-evolving form of malware it's hard to know the best steps to stay safe, but here are a few good suggestions to help keep your computer free of infections and ensure your important data is safe.

AntiVirus

Always make sure you have a good and up-to-date AntiVirus solution in place.  Although we sell and recommend AVG AntiVirus, there are many products available that can offer a good level of protection.  There are free AntiVirus options but often they don't offer the same level of protection and support as paid versions.  We understand if you have a personal preference and suggest that you stick to a solution that has served you well.  If you've remained virus free with the product you are currently using - stick with it.

Malware Protection

At CompuSave we recommend using Malwarebytes Antimalware alongside your AntiVirus solution.  Having multiple layers of protection is the best way to combat an ever-changing world of viruses and malware.  Malwarebytes does an excellent job of protecting you from programs that give you un-wanted advertising and pop-ups and the cost is very minimal.

Data Backup

Having an up-to-date backup at all times, with several versions (retention period) is the best way to ensure that you can get your data back if you are a victim of ransomware.  CompuSave has partnered with IT Cloud Backup to offer you backup solutions for home and business.  If you are currently backing up to an external hard drive or memory stick, you have to ensure you are doing it as often as you make an important change on your computer.  You also need to ensure that you have several versions available just in case your last backup overwrote good files with ones that are now encrypted.  Also, in order for your backup solution to be of any value to you, it should be protected against fire and theft.  Our online backup solutions cover all of these recommendations by backing up automatically, daily and to a secure, off-site location with versioning options.  Visit our backup page for more details.

If you've been a victim of fraud and wish to file a report, or if you wish to obtain more tips regarding dealing with fraud, either call your local police department or call the Canadian Anti-Fraud Centre at 1-888-495-8501 or report a complaint using this form.

More information...

We wouldn't be surprised if you have more questions about ransomware and protecting your data and devices.  Feel free to be in touch if you need more information.

CompuSave Computers Inc.

Your Technical Team - On Your Side

Call or Text: 519.863.6336  -  Email: support@compusave.ca

Website: www.CompuSave.ca

Posted: June 2016

Author: BK