Symantec found a "vaccine" from a virus-extortionist

29 June 2017, 01:53 | Science and Health
photo glavnoe.ua
Text Size:

The antivirus company Symantec claims that it found a way to stop the spread of the virus that a day earlier infected the systems of large Ukrainian and Russian companies and departments. Specialists of the company assure that to prevent infection of their computer, the user just create one empty file in the folder C: Windows.

In Symantec, the solution is called a "vaccine" from the Misha virus, which encrypts data on the user's computer and in exchange for decryption requires paying $ 300 in bitocans.

In order to stop the spread of the virus on your computer, the user must create an empty file called "perfc" with the "read only" option in the C: Windows folder.

Experts from several other companies working in the field of cybersecurity confirm that the method works.

"Vaccine", however, allows you to protect against virus only individual computers. In this case, they remain the carrier of the virus, that is, they can infect other machines in their network. How to stop the cyber attack as a whole is not yet clear.

On Tuesday, dozens of Ukrainian companies and state institutions reported that they were attacked by a virus-extortionist.



Also on the attack on their resources reported the steel company Evraz and several smaller Russian companies, including the confectionery chain, the Home Credit bank and pet food distributors.

In the criminal laboratory of Group-IB, RNS was informed that Ukrainian energy companies, including Ukrenergo, banks, including Oschadbank, several media including Korrespondent and Channel 24, Ukrainian mobile operators, A large network of gas stations, Kiev airport Borispol and Kiev metro.

In total, according to the estimates of Group-IB, more than 80 companies and departments were affected by the virus in Russia and Ukraine.




Add a comment
:D :lol: :-) ;-) 8) :-| :-* :oops: :sad: :cry: :o :-? :-x :eek: :zzz :P :roll: :sigh:
 Enter the correct answer