Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 1 subscriber
  • Views 15409 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ICE Cyber Crime ransomware assistance

searbet

Yesterday a user running up to date Sophos Endpoint Security was infected with Ice Cyber Crime ransomware.  The system could not even be booted into safe mode and once it appeared to be removed and Sophos again showed an up to date status, the ransomware returned.

Has anyone seen issues with this?  The traditional suggestions for removal (aside from paying the "ransom") have not been working.

:48140


This thread was automatically locked due to age.
Parents
  • 0

    Hello searbet,

    fortunately this is not the encrypting type. For a start, please read Information on malware known as Ransomware.

    Note the following from the article:

    Does Sophos Endpoint Security and Control protect my computer from ransomware?

    Yes, but the malware writers are constantly updating and releasing new variants and families.

    Naturally the malware writers do not submit new variants to AV vendors before releasing them on the public. V.v. AV vendors can't obtain early samples in order to have a detection in place at "release time".

    the ransomware returned

    Without details it's hard to say why. Please follow the advice in the article - and perhaps you should try SMaRT.

    Christian

    :48142
Reply
  • 0

    Hello searbet,

    fortunately this is not the encrypting type. For a start, please read Information on malware known as Ransomware.

    Note the following from the article:

    Does Sophos Endpoint Security and Control protect my computer from ransomware?

    Yes, but the malware writers are constantly updating and releasing new variants and families.

    Naturally the malware writers do not submit new variants to AV vendors before releasing them on the public. V.v. AV vendors can't obtain early samples in order to have a detection in place at "release time".

    the ransomware returned

    Without details it's hard to say why. Please follow the advice in the article - and perhaps you should try SMaRT.

    Christian

    :48142
Children
No Data