Comments on: Meet Ransom32: The first JavaScript ransomware https://www.emsisoft.com/en/blog/21002/meet-ransom32-the-first-javascript-ransomware-2/ Straight-talking security advice from the Malware Experts Fri, 18 Nov 2022 12:19:51 +0000 hourly 1 By: Tank2700 https://www.emsisoft.com/en/blog/21002/meet-ransom32-the-first-javascript-ransomware-2/#comment-784373 Wed, 01 Mar 2017 09:56:00 +0000 http://blog.emsisoft.com/?p=21002#comment-784373 In reply to Lars Jeppesen.

Majority of Linux users use sudo like ketchup on fries without even thinking about it.

]]> By: Francis Kim https://www.emsisoft.com/en/blog/21002/meet-ransom32-the-first-javascript-ransomware-2/#comment-620965 Tue, 24 May 2016 11:26:00 +0000 http://blog.emsisoft.com/?p=21002#comment-620965 Wow, great write up. Didn’t know randomwares worked this way, how you get a cut of the profit etc.

]]> By: SM Of Malta https://www.emsisoft.com/en/blog/21002/meet-ransom32-the-first-javascript-ransomware-2/#comment-514782 Sun, 14 Feb 2016 21:37:00 +0000 http://blog.emsisoft.com/?p=21002#comment-514782 In reply to Fuzzee Lowgeek.

An FTP server will be fine.

]]> By: Chiron https://www.emsisoft.com/en/blog/21002/meet-ransom32-the-first-javascript-ransomware-2/#comment-491942 Fri, 15 Jan 2016 12:31:00 +0000 http://blog.emsisoft.com/?p=21002#comment-491942 In reply to Dodutils.

Thanks a lot Tim! I’ve been looking for a new decent malware-protection software after Emsisoft left us high and dry with our WinXP and tried to push in Win10 instead, and upon your words as well as the info I then found on the web it looks like Webroot should suit fine me and my associates for at least another 4 years.
And then… well, in the meantime Microsoft might finally succeed developing another decent, discrete and fast OS to replace XP – hope is still tax-free, I suppose ;-)

]]> By: Fuzzee Lowgeek https://www.emsisoft.com/en/blog/21002/meet-ransom32-the-first-javascript-ransomware-2/#comment-491810 Thu, 14 Jan 2016 11:46:00 +0000 http://blog.emsisoft.com/?p=21002#comment-491810 In reply to Christian.

Thanks. What if I use an imaging software? Would multi-gigabyte image files also be at risk?

]]> By: Tim https://www.emsisoft.com/en/blog/21002/meet-ransom32-the-first-javascript-ransomware-2/#comment-491693 Thu, 14 Jan 2016 01:21:00 +0000 http://blog.emsisoft.com/?p=21002#comment-491693 In reply to MP.

I have moved 145 systems to Webroot over the last few months and since it works fine along side other AV we are leaving the existing protection in place until it’s license expires. I have been seeing 5 to 10 times a week that Webroot stops what the others don’t

]]> By: MP https://www.emsisoft.com/en/blog/21002/meet-ransom32-the-first-javascript-ransomware-2/#comment-491692 Thu, 14 Jan 2016 01:04:00 +0000 http://blog.emsisoft.com/?p=21002#comment-491692 In reply to Tim.

Hi Tim
Thats great news re Webroot considering we are moving all clients to it at the moment. :)
NEVER been a fan of Symantec nor McAfee to be honest.
Over 20 years, most systems infected are with the above.

]]> By: Tim https://www.emsisoft.com/en/blog/21002/meet-ransom32-the-first-javascript-ransomware-2/#comment-491691 Thu, 14 Jan 2016 00:51:00 +0000 http://blog.emsisoft.com/?p=21002#comment-491691 In reply to Northcountry native.

I just had it get past Symantec endpoint protection only to be stopped by Webroot SecureAnywhere.

]]> By: disqus_aLQ5C9VbIK https://www.emsisoft.com/en/blog/21002/meet-ransom32-the-first-javascript-ransomware-2/#comment-491685 Wed, 13 Jan 2016 12:03:00 +0000 http://blog.emsisoft.com/?p=21002#comment-491685 hi :) I have a question.
how did you know that “Files are being encrypted using AES with a 128 bit key using CTR as a block mode.” ?
where is key file ? or … where is something about AES file..? :(

]]> By: Cihan Erdem https://www.emsisoft.com/en/blog/21002/meet-ransom32-the-first-javascript-ransomware-2/#comment-491681 Wed, 13 Jan 2016 07:39:00 +0000 http://blog.emsisoft.com/?p=21002#comment-491681 hi all, i can help you to decrypt your “.vvv, .ecc, .ezz, .exx, .xyz, .zzz, .aaa, .abc, .ccc” files, please contact me by mcerdem82@yahoo.com

]]> By: Christian https://www.emsisoft.com/en/blog/21002/meet-ransom32-the-first-javascript-ransomware-2/#comment-491667 Tue, 12 Jan 2016 18:14:00 +0000 http://blog.emsisoft.com/?p=21002#comment-491667 In reply to Fuzzee Lowgeek.

Yes. Typically it encrypts all files that are in reach of your user account. Therefore you should always store your backups on devices are are disconnected most of the time.

]]> By: Dodutils https://www.emsisoft.com/en/blog/21002/meet-ransom32-the-first-javascript-ransomware-2/#comment-491664 Tue, 12 Jan 2016 16:16:00 +0000 http://blog.emsisoft.com/?p=21002#comment-491664 In reply to Northcountry native.

ALYac
AVG
AVware
Ad-Aware
AhnLab-V3
Avast
Avira
BitDefender
CAT-QuickHeal
Comodo
Cyren
DrWeb
ESET-NOD32
Emsisoft
F-Secure
Fortinet
GData
Ikarus
K7AntiVirus
K7GW
Kaspersky
McAfee
McAfee-GW-Edition
MicroWorld-eScan
Microsoft
Panda
Rising
Sophos
Symantec
Tencent
TrendMicro
TrendMicro-HouseCall
VIPRE
nProtect

]]>