Is Ransomware capable of encrypting the whole hard disk?

[_CyberGhosT_]

Also it would be counter productive for malware to encrypt the entire disk because how would the user get online to pay the hacker? Some malware out in the wild now do destroy files or disrupt a machine's boot up like Petya and JIGSAW but these are more rare just because of what an inconvenience it might be for the user if they actually want to pay for the decryption key

Hanmin147 is correct. It's does not need to, it only needs to attack a small portion to have maximum effect. It would be wasteful for it to encrypt it all when it does not need to, to accomplish it's goal.
Good question though.
PeAcE

 

[Zerion]

But it's only the Windows partition? So all other disks are safe?

 

[hjlbx]

But it's only the Windows partition? So all other disks are safe?

No. There are ransomware that will encrypt all partitions and connected drives - including un-mapped network shares.

You can use ACL (Access Control List) to protect files, folders, partitions and drives - but it is much more simple just to disconnect external drives - and above all else - don't execute unknown\untrusted files. There's more to it that than, but it is the most basic things...

 

[NullByte]

A ransomware will encrypt every file (extension) that is has in "encryption list" any USB, HDD, Network Shares will get encrypted. In other words, everything.

 

[Zerion]

Ouch, RIP 8TB if that happens, such a sick virus.

 

[DardiM]

Ouch, RIP 8TB if that happens, such a sick virus.

When a ransomware is looping to encrypt as many data, if you are in front of you PC, it's not to hard to detected it (too many Drive access, for example).
It's like driving a car, your can hear abnormal activities (but this is not an anti-ransomware tool , and doesn't protect well, lol)

 

[jamescv7]

The answer is yes, Ransomware like PETYA manage to encrypt the MBR which considered to encrypt everything.

As also mentioned, even network drives can also be affected; however majority where mostly .exe, documents files, image files, video files and few others are their main target for encryption so overall you are infected with partial files on hostage.