Link to home
Start Free TrialLog in
Avatar of Robert-Prodigy
Robert-ProdigyFlag for Israel

asked on

CryptoLocker

is anyone know some working solution that can prevent CryptoLocker to infect my network computer?
Avatar of WayneATaylor
WayneATaylor
Flag of United Kingdom of Great Britain and Northern Ireland image

What we are doing to prevent it is to create a new local security policy or a GPO for an AD network domain that prevents any EXE's running from within %AppData%

This works because this is where Cryptolocker runs.

You might find you have to create whitelist entries to allow required programs to run, i.e. some installers/updaters etc but this does work well.  We've had no infections once doing this for customers.

Wayne
Avatar of Robert-Prodigy

ASKER

thx any chance to decode  infected machine? we have one machine that encrypt all the files - no shadow copy or backup for this machine - we excite some operation mention in article over the net currently with no luck - nothing work :( files still encrypt

also anyone ever pay for this guys?
ASKER CERTIFIED SOLUTION
Avatar of WayneATaylor
WayneATaylor
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
is any one ever tried to decrypt with Kaspersky decrypt utility? is there any other tools that try to decrypt crypt locker encryption?
Avatar of btan
btan

For info on - FireEye and Fox-IT have partnered to provide free keys designed to unlock systems infected by CryptoLocker.

https://www.decryptcryptolocker.com/