The Anti-virus Times

2017年7月3日星期一

Many people keep right on working even after they notice their computers are infected or behaving strangely. We are republishing two quotes from our issue devoted to typical user errors:

When the WannaCry outbreak happened, users “devised” another method for disarming the encryption ransomware. As you know, most encryption ransomware strains communicate with command and control servers. Specifically, this enables them to generate encryption keys on a remote host. Therefore, if we unplug the network cable, the ransomware will lose its connection to the server and won't be able to do anything without the server’s instructions, right? And it won't be able to spread over the network. Indeed, that sounds quite logical!

However, ransomware makers aren't fools. If the connection to the server is interrupted or access to the local network is lost, the malware immediately commences with its encryption activities.