Image
Interordi Menu
Mega X.exe
Forum Ghost
Offline
6444 posts
Quote

News Story by Jeremy Kirk

OCTOBER 25, 2005 (IDG NEWS SERVICE) - Two new versions of a virus first reported in May are staging renewed attacks against computers in Russia, encrypting files and then extorting money from victims to decode the files.

After an infection, the Russian-language instructions let victims know how many of their files have been encrypted. Translated, the warning says, \"If you want to get these damn files in the decrypted format\" then write to the e-mail address given. The message goes on to say, \"P.S. And be thankful that they were not completely erased!\"

The viruses, called JuNy.A and JuNy.B, search for more than 100 file types by extension, according to a warning issued by Websense Inc. The renewed attack was first reported on a weblog published by Kaspersky Lab Ltd.

So far, the viruses appear to be limited to Russia, and it\'s not known how many computers have been affected. The viruses are similar to one that struck in May called \"gpcode,\" said David Emm, senior technology consultant for Kaspersky in the U.K. The gpcode included an e-mail address where presumably a fee for the decoder would be negotiated, he said.

\"As I understand, this thing was progressive, and it would gradually encrypt more and more stuff,\" Emm said.

Left alone, the virus would encrypt everything but a text file, Emm said. It\'s suspected that the virus enters a computer after a user visits a certain Web site and then exploits a vulnerability, Emm said. Another theory is the virus is activated after a user runs some type of executable code containing the virus, Emm said.

But it isn\'t easy tracing the origins of the viruses because \"by the time you get to hear of these things it\'s kind of erasing information on the host machine,\" Emm said.

Virus writers who seek to extort money from victims are nothing new and have been around since at least 1989, Emm said. In the last couple of years, however, virus writers have moved away from writing malicious code simply to display their skills and are increasingly trying to make money, he said.

BlueSilver
Rick
Inactive
835 posts
Quote

As the editor of a paper, I noticed that the guy who wrote that used \"he said\" way to many times.

Gets annoying.

But it is a useful bit of info, thanks X!;)


"I worship the Supreme Comrade Cossack!"

Staff Backer Doctacosa
Admin
SciLab Official
Benevolent Dictator
Offline
6437 posts
Zenny
Zenny
Unlock all of the main forum features!
Acquired on 1 April 2014
Princess Celestia
Princess Celestia
Got all items in the AFD2012 event!
Acquired on 1 April 2012
Squid beaker
Squid beaker
Earned all 150 original CL achievements
Acquired on 17 January 2016
Unity.EXE emblem
Unity.EXE emblem
Defeat Bass.EXE in the AFD2013 event!
Acquired on 1 April 2013
Lilly Satou
Lilly Satou
Acquired on 1 April 2012

... and 25 more
Quote

That sucks. It reminds me of an older virus, way back when DOS was popular: if you got infected, it would delete your MBR (the thing that tells the computer where the operating system is located) after doing a backup of it, then would start a russian roulette game with the user. If the user lost... The backup was deleted and the computer\'s data couldn\'t be salvaged!


The admin formerly known as Dr. Cossack.

Looking for me elsewhere? Maybe look at my Fediverse account for some more-or-less random postings! If you're a gamer, check out my Osmium profile. I'm building that tool!

Black Dranzer.exe
World Traveler
Inactive
2827 posts
Quote

Aw *insert naughty word here* *puts up extra fire wall* *hops in anti-spyware tank* Bring \'em on!


Hey beautiful people, you're better off trying to e-mail me than message me on here.

Morphman
Niz-Da
Offline
2647 posts
Quote

*sits and stares at screen* *points at little green thingy* \"So THAT\'S what that thing is...\" :P \"Aww well, my computer sucks anyway, it\'s slow, it takes a lot of electricity, raising Bill to enormous heights... DANG WINDOWS ME!\" XP


Image
All hail the Supreme Comrade Cossack!