Another try to vaccine against ransomwares

[Dirk41]

Combination Crypto-Ransomware Vaccine Released | Bitdefender Labs

An Italian website explain that with this FREE tool by BD, the ransomware ( it targets teslacrypt, locky , cbt -locker ) thinks the PC is already infected . ( some ransomware doesn't attack two times a PC already infected, they explain )

Sorry I couldn't find the explanation in English . But if you want I can link the Italian website

 

[Soulbound]

Combination Crypto-Ransomware Vaccine Released | Bitdefender Labs
( some ransomware doesn't attack two times a PC already infected, they explain )

That didnt happen on my VM at the time thats for sure.

there's "marketing" involved in the messages these companies present to the users. Always take it with a pinch of salt

 

[Dirk41]

When? I supposed it's a new feature that didn't exist before

 

[Soulbound]

When? I supposed it's a new feature that didn't exist before

I am referring to the claim that it doesnt attack twice the same pc.

VM was attacked at least 3 times in succession. In any case this was around a week ago and I am not referring to any vaccine.

 

[jamescv7]

Well those vaccine are should be treated as a major campaign against those nasty ransomwares and not for marketing usage.

Actually that's the problem nowadays, better when an analysis is released from neutral researchers instead on security companies that are bind to have biased at end of sentence pattern.

 

[Dirk41]

I am not an expert anyway maybe I didn't explain it well: the ransomware supposes there is ALREADY another ransom in the pc.

 

[Dirk41]

Oh and it is not saying that ALL ransom work in that way.
Anyaway again : I am absolutely not an expert . I didn't trust bitdefender . I trusted them:Ransomware - Ransomware Blog

 

[Dirk41]

sorry i forgot to say that they are testing it, the first results are ok but they will keep us updated about the test..they also say that other users ,that want to test and share results, are welcome

 

[DardiM]

I think that If a ransomware can test if a PC is already infected by him (or another ransomware), it must not be too difficult to change the ransomware tests to work around a "vaccination", in another version ( then an upgrade of vaccination tool ? => like Anti-malware / anti-virus tools with their data-base update)