« first day (1807 days earlier)      last day (3074 days later) » 

12:07 AM
Dr. who fanaticism is required for entry to this room? Awesome. I love that show so much
The roads are all icy, and people insist on driving like psychotic maniacs. An 18 wheeler ran someone clean off the damn road nearby
Tons of cars upside down in the ditch, on their sides, etc. Freaky
 
 
1 hour later…
1:32 AM
@MarkHulkalo mandatory winter equipment here (winter profile tires, snow tire chains,....) starting from 15th Nov. and that's exactly the reason why we have that
I drove once through Romania on that single highway they have during a snow storm and saw that tho ... was kinda surreal, we went past more cars in the ditch than those still struggling even tho we were like at least 5x faster with 4WD and full winter equipment than most of them
was that last time that the Black sea froze, about 5 years ago I think
 
2:23 AM
Yeah mandatory winter equipment is needed here
I don't know if we have that, but I just saw another group of cars in the ditch
Even worse, an 18 wheeler flipped the fuck over. One barrelled across the other end of the highway and nearly hit people on the other end
But that one didn't flip. The one that flipped... I don't know if the dude made it :( cop seemed to be trying to figure out if he was OK or not
I called 911 for another guy, and it turned out they already rescued him earlier, just the car was stuck there. I feel like a giant ass, but I couldn't tell from that angle. I turned around to check, and saw the police line. So I turned around again, and after I got back on my side, the rescue vehicle was there.... And they were flipped over. Another vehicle was helping them out.
 
3:22 AM
@Simon Or someone with anxiety problems.
@AviD lol, much of this is true
 
 
3 hours later…
6:34 AM
Hello
Should i pay hacker 500 $ to decrypt system infected with ransomware or I try recovering it through software such as recuva?
 
6:48 AM
._.
You should recover from the periodic backups you ought to have made
There's also tools floating around that decrypt common ransomware.
 
yup here's one noransom.kaspersky.com
otherwise, nuke from orbit, restore from last known good backup
 
(and seriously, in this day and age there is no excuse for not having backups)
And try to avoid paying ransomware writers. Seriously.
 
it also doesn't guarantee anything
 
Yup
Also, recurva ... well...
Its good for oopsies.
Totally not what a professional would use.
 
What can recuva even do for ransomware? You'd first have to make sure you're free of it, then you restore some of the deleted files that weren't overwritten and completely lost? Or can it do something better?
 
7:00 AM
@TildalWave pretty much. Assuming it dosen't get encrypted again.
recurva would help if the original files were still not overwritten and were floating around somewhere.
 
I thought that's more of a "oh noes I haz pwnd my pron pls help" type of a tool
ah well it is, I thought right
 
Its more I accidentally my prons.
As I said, good for oopsies
 
so restoring deleted porn as a poor man's vault and restoring intentionally deleted porn as a poor investigator's forensics tool
going through feature list, I see it also has some simple "secure overwrite" feature
 
yup
Its good for muggles ;p
 
hehe
muggles
 
7:28 AM
Hi everyone
did someone got to read my question? I posted here few hour back
 
7:47 AM
@Saladin read up
 
7:59 AM
Mornin' All
 
8:09 AM
there is no read up:)
I cannot locate any response to my question.
@JourneymanGeek ??
 
1 hour ago, by Journeyman Geek
You should recover from the periodic backups you ought to have made
1 hour ago, by Journeyman Geek
There's also tools floating around that decrypt common ransomware.
 
@Saladin it is literally the entire conversation between your conversation and now.
 
1 hour ago, by TildalWave
yup here's one https://noransom.kaspersky.com/
 
well, except discssuing the discussion.
 
Read up
 
8:11 AM
the meta-discussion, if you will
 
Morning all!
 
(alas there's no markdown for YELL THIS IN SOMEONE'S EAR)
 
@RоryMcCune are you gonna copy ALL the answers?
 
@M'vy mornin'
@AviD I thought I'd got the key points :)
 
We quite literally gave you multiple correct approaches, and you're all...
 
8:11 AM
@JourneymanGeek maybe a shotgun would help
 
@AviD too messy tho.
 
@AviD aren't you meant to be in a food coma or something now
 
Maybe tattooing it into his eyelid?
 
@JourneymanGeek hey, maybe somebody deleted the chat for him
we should have chat backups
@RоryMcCune no no, in Israel we celebrate Thanksgiving a day later, so tonight.
 
@AviD Clearly he's corrupted. Maybe we should back him up. Or replace him with a very small shell script.
 
8:12 AM
@AviD ahh I see, so it's like giving thanks for Black Friday?
 
@RоryMcCune heh, lets get real, its all about Cyber Monday.
Or, as most sites are doing, Black November.
 
@AviD well I'm already giving thanks for amazons large reductions in Whisky prices :)
 
why even go into stores anymore, you get better deals online?
 
;p
@AviD heh, I do most of my computer parts shopping oldschool.
 
@TildalWave thanks the whole system is slow as turtle thanks for your response.
 
8:14 AM
@AviD yeah it's a social thing for some people I reckon... The missus is off shopping with her mum today, but I think they'll just look at stuff then buy it online later...
 
But I have a wierd love of that wretched hive of scum and villany.
 
The ransomware the laptop is infected with is "cryptowall"
 
@Saladin Its not the system that's slow....
 
@JourneymanGeek soem computer stores are very fun.
 
@AviD: its a mall that's dingy, slightly odd smelling, and typically you'll get ripped off if you don't comparison shop <3
 
8:15 AM
@TildalWave is there any
ransomware decryptor for "cryptowall"
 
pffft
@Saladin version 3 and up, the answer is no
 
And they made it harder by stopping stores from giving out fliers
 
so @AviD for "crypto wall" what are my best chances the infection is removed
verified it from multiple scanners .
 
either restore from known good backup, or nuke from orbit and accept your losses.
 
8:17 AM
feels like we're getting HVed.
 
@AviD and for recovery suggestions...
 
HVed?
 
@AviD I can pay? is it safe
 
(psst. There's a question on cryptowall on security.se)
 
@Saladin no such thing.
 
8:17 AM
I found it by googling.
 
@Saladin no. not at all.
 
@AviD really??
@AviD how?
 
how what
 
1 hour ago, by Journeyman Geek
And try to avoid paying ransomware writers. Seriously.
 
mmmm
 
8:18 AM
@AviD help vamped ;p
 
@JourneymanGeek I disagree. No "try" about it.
unless we're talking bankruptcy / company closure.
@JourneymanGeek ah. true.
 
(Since we discussed most of the things already ;p)
 
so @AviD so with infection removed how will the hacker contact me when deadline expires?
 
@Saladin they don't.
 
@JourneymanGeek so they just play scare tactics ?
 
8:20 AM
No, they don't contact people
 
@JourneymanGeek contact through non-active means writing a file to disk with instructions
off the band communications
 
@AviD AVIIIIIIIIIIIIID
 
They don't give a shit about people who don't pay. The ones who meet the intersections of "got infected", "have no backups" and "are dumb enough to pay" are their targets.
 
@JourneymanGeek :)
so all ransomeware delete original files? is it true.
 
Commonsensically? The whole scam wouldn't work otherwise.
 
8:22 AM
and now you're in the realm of nonsensical almostquestions.
 
scam? the files are encrypted? what part of scamming does it entails
 
for first, you can't know your data are still here. For second, you cannot trust they would decode it when you pay.
if they decode it, it's also probably infected so they can get more money from you
 
and third, you are inviting these known-malware-authors to run arbitrary programs on your computer. That sounds like sound thinking.
 
so basically, NftO
 
@AviD that programs are called decryption programs provided with private key? but then do are Trojan horse at best
 
8:25 AM
I was thinking "Nfw". what is ntfo?
 
anyhow, so any good recovery software beside recuva?
 
Nuke from the Orbit
 
@Saladin are you going to just keep asking until you get a different answer? you won't.
 
Isn't it Nuke it from orbit?
 
@M'vy ah. no "the".
 
8:25 AM
(its the only way to be sure)
 
ah man, you're complicated guys
 
@JourneymanGeek NifO.ItOWtbS.
 
@AviD thanks
 
For a movie I don't care all that much for, I know that line far too well ;p
 
8:27 AM
And I'm pretty sure there should be a specific orbit for that. Hence the "the"
@Saladin Reovery software are good when you deleted the files. Not when you rewrote them
 
@Schroeder you are closing questions I asked more than 3 years ago :P?
 
@LucasKauffman he'll catch up, dont worry
ooh, this is a nice deal 2x 480GB SSD (SanDisk) for 215$
 
@M'vy but i read on same site as this someone recommending recuva because the ransomware programs don't securely delete the original files
 
@Saladin okay, you should definitely try that then.
let us know if it works.
 
12
Q: How can I decrypt my files from "Cryptowall" encryption?

ArxI just got infected with "Crypt0L0cker" malware,virus or whatever that might be. They gave me a link (http://bica3zjnvl6fxkqf.tor-area.org/jrrk14.php?%20user_code=94aya99&user_pass=2616, the target site being suspicious the link is voluntary not clickable) to pay the ransom. I don't know if is t...

 
8:32 AM
@Saladin note that the person that recommended using recuva for this also quoted GRC (Gibson's place). So thats trustworthy (not).
 
@AviD Gibson...
 
seriously, the industry should just flag the guy already, ban him for a while.
 
the guy makes a podcast doesn't he?
 
lol gibson.
 
more like a clowncast, amirite?
 
8:35 AM
@AviD trustworthy who got community appreciation 10 point up?
 
9
 
@AviD doesn't matter the meaning is same
 
Does he have anything other than spinrite (which, even if it wasn't snake oil, hasn't been updated for modern technologies) that's in any way relevant?
 
@JourneymanGeek ahh Zip/Jaz disks, those were the days
 
@Saladin fine, I went and left a comment. Happy?
 
8:37 AM
huh iomega got bought by Lenovo, who knew
 
That was a while back
 
@JourneymanGeek it was compeltely snakeoil when he came out with it.
 
Lenovo is the new borg.
 
@AviD I know this site old enough to know what is what.
 
@JourneymanGeek yeah I was thinking I'd not heard anything from them in a while
 
8:37 AM
and he has a few other harmful snakeoil.
 
@AviD oh, giving it a slight benefit of the doubt.
 
funny how companies who used to be really important fade away
 
@RоryMcCune iomega was still around???
 
Personally I have magical things like lots of backups, that are versioned and synced to multiple systems.
 
This is really not an answer at all, not to mention ridiculously wrong, and not just because you're relying on a clown. CryptoWall (specifically mentioned in the question) does not meet that criteria, it does remove the original files correctly. — AviD ♦ 1 min ago
 
8:38 AM
@AviD well long enough for lenovo to buy 'em anyway
rpadistribution.co.uk/… <-- people still sell Jaz disks!!
 
@Avid still 9 marks says a lot about the community scoring / approval methods.
 
@RoryAlsop: people sold beta tapes until recently.
 
@Saladin yeah, thats true. A lot of clueless people have voting rights here.
@RоryMcCune ymean like for a musuem??
 
@AviD woman you mean?
 
@LucasKauffman wat
 
8:40 AM
Com'on even Begueradj has a better answer
 
@AviD voting rights joke :p
 
@LucasKauffman please explain.
 
@AviD care for a wager that some company still use 'em for realsies, I bet they do
 
@AviD and lot of intelligent ines here are busy down-voting innocent mistakes.
 
before I go ahead and give you the full #simon treatment.
 
8:42 AM
@RоryMcCune That would be the very definition of cripping technical debt.
 
Anyway you can still "try" the recovery tools. But don't expect miracles
The take home message is: backup before it's too late.
 
@M'vy i agree
@M'vy i think the restore point was also removed by the ransomware if yes is there a way to undelete the restore point
 
Lost trust cannot be recovered
 
in men or machines?
 
This has not turn to a psychology chat room yet, has it?
 
8:47 AM
@Saladin restore points are meant to sort out "oops"
Proper backups help you sort out smoke coming out of your PC.
Backups done right...
 
@JourneymanGeek I think auto cloud backup services are best?
 
If your office catches fire... You should be able to walk into a store, buy a new PC, sync over your data and carry on.
 
Human intervention is slow and full of hicups.
 
@Saladin but necessary
 
And backup that's not tested is useless.
And per machine
 
8:49 AM
@JourneymanGeek wrong, backup that is not tested is no backup
 
look at synolocker.
 
My usual backup software fails when you have under 2gb of ram, and I worked that out during a test.
 
@AviD what wrong with dropbox/ i'm talking about data backup not system.
 
(which can be considered as useless to be fair to you :))
 
for me data is more important then system
 
8:49 AM
(my system backups at home are tested twice a year)
@Saladin depends on the nature of your threat
My system backups are mountable and I can pull data from it.
 
@JourneymanGeek exactly i'm talking about home user not one working for NASA
 
@Saladin what isn't wrong with dropbox? Uploading your important data to dropbox is like burning it to dvd and mailing it to the american government
 
Best practices are best practices.
 
@kalina american govt I don't care as long they keep it safe
 
My current setup is cheap in terms of software, reasonably priced in terms of hardware
 
8:51 AM
what is private any more? this chat room
 
this chat room isn't private
 
and I've literally survived 2 copies of my data being accidental.
 
@JourneymanGeek what backup software do you use?
 
@AviD veem endpoint backup for my system, bvckup for file level backups
bvckup also syncs up my system images to 2 other locations
 
thanks. I will look into those.
still havent found something I'm happy with...
 
8:54 AM
I suppose one day I should discuss my "backup system" so you can mock me and I might even get some tips on improving it
 
@AviD write your own!
 
@RоryMcCune pffft
@JourneymanGeek bvckup 2, yes?
 
@AviD yeah
The free, older version has a lot of the same functionality if you want to test it out
 
@JourneymanGeek from what I can tell, it would not help with cryptowall. it would have simply synced the encrypted files.
 
(I was running that from the beta)
@AviD: It keeps copies of deleted files.
 
8:57 AM
looks liek it is targeted against system disk failure.
@JourneymanGeek does it keep old versions of changed files?
 
errrrr
 
because thats what CryptoWall does.
 
lemme check
 
I dont see anything like that on the site.
 
Oh it only backs up deleted stuff
 
8:58 AM
this is why I keep syaing, backup is hard to do right.
 
I mainly use that to sync up my full system images (which are incremental)
and my music.
 
@AviD that's 'cause there's no one "right" for all circumstances
 
And, why a threat model is always important, even for something trivial like backups.
@JourneymanGeek yeah that would be good for me.
@RоryMcCune true, hence the TM.
 
oh, and a periodic dump to a disconnected USB drive, when I remember
@AviD most good backup software does that tho.
veem's pretty friction free (and prunes old backups as needed)
 
@JourneymanGeek well.... I'm still looking.
 
9:00 AM
Of course, it only backs up to one location and one is none and does one backup job (so I can't backup less important stuff less often)
 
also another problem even if that was solved, CryptoWall would simply access the backup folder and encrypt those files too.
CW writers are evil geniuses.
ooh @Rory - for your next birthday!
 
I want that
 
9:18 AM
wrong color blue
 
@kalina good observation for a self-confessed non-whovian :op
 
I'd said wrong size, but only in the inside.
 
@M'vy heh
 
Plus the content is not very whovian as well
 
@M'vy oh dont worry, have a few drinks and then you'll see that it is bigger on the inside
 
9:24 AM
But kinda appealing. I must admit
 
@M'vy why not? mostly scottish.
 
Hm. Fair point.
 
if it was a fridge, I would say it needs fish fingers and custard.
maybe that little dalek on the door opens up as a container for jelly babies.
 
@RоryMcCune I don't like Doctor Who, that doesn't make me blind
 
@kalina sure but it implies you may not have seen enough TARDIS images to know the exact shade of blue :op
 
9:29 AM
@RоryMcCune anyway, it could just be an issue with the light, a bad picture...
somebody went to that much trouble, I assume they know what TARDIS blue is :-)
 
@AviD don't think so, the panel that says police box is clearly a darker blue
 
"up to 94% off plugins" /cc @Simon
Not going to tell you where though
so bwahahahaha
.
no, I'm not spending loads of money this weekend, I shall curb my spending addiction
 
> Thank you for reviewing 20 close votes today; come back in 14 hours to continue reviewing.
damn
 
@kalina evil
 
well I have to massively limit the amount of stuff I tell you guys because apparently it's being actively tracked
 
9:34 AM
@kalina there probably is a secret Kalina database that stores all of this.
 
@M'vy hey hey, first rule of the secret kalina database is, don't talk about the secret kalina database!
@kalina yeah apparently so.. I think you've presented a puzzle, and security geeks love a good puzzle
 
@RоryMcCune so you're saying that @kalina is a figment of our imagination?
 
@AviD ohh that would be good, @kalina is Tyler Durden
 
@RоryMcCune well, my mistake
 
@kalina why a mistake?
 
9:37 AM
@RоryMcCune YES WE ALL LOVE KALINA
@RоryMcCune because then people like me will say things like that ^
 
@AviD I didn't say that, I said a puzzle,
 
actually I just did to stop @Simon from saying something worse.
@RоryMcCune and you said she is a puzzle
 
@AviD nope I said that @kalina had presented us with a puzzle, not that she was one
 
an argument about semantics on the internet, how refreshing
 
@RоryMcCune oh true
 
9:39 AM
@kalina really, 'cause you'd think you'd have seen a load of those, they're quite common in textual communication mediums where nuance is often lost
 
whatever
 
@kalina I can see you've got that Friday feeling :op
 
I'm a little upset if I'm honest with you
 
@kalina ah, sorry to hear that :( related to DMZers or other stuff?
 
related to this situation, that I usually run from
 
9:44 AM
@kalina ahh I don't think that anyone meant anything bad by it, but I understand that it could be disconcerting...
 
guys beside malwarebytes and windows essentials what best AV for windows ?
 
@kalina sorry, it is unfortunate that it's quite easy for things on the Internet to forget that there are people behind the keyboards
 
@Saladin your question is ridiculously ambiguous
 
@kalina how?
 
@Saladin it didn't contain AV
 
9:46 AM
it does now:)
 
yes, and now it's just ambiguous
 
:)
 
@i cannot give you perfection or promise you one either
 
neither can any AV for Windows
 
personal AV, entreprise AV, server AV ?
 
9:48 AM
@Saladin One letter pings don't work.
 
personal AV.
 
@Saladin the best personal AV is called "common sense"
 
@kalina i thought we were off being ambiguous...
 
@kalina yeah, it might need a bit of technical knowledge as well. But the point stands
 
@Saladin common sense isn't ambiguous
 
9:49 AM
@Saladin realistically current A-V technology cannot provide strong protection against malware threats, as more advanced actors are accustomed to bypassing A-V as part of their malware creation process. As such whilst it's not bad to use it, it's important not to rely on it, as you will likely be disappointed if you do
 
@kalina for me it is. Beside its all relative. You go along grabbing your end of stick.
@RoryAlsop do you have personal choice?
 
@Saladin common sense is not relative
it's a very specific set of sensibilities
don't put your hand in fire
 
@kalina for me it is.
 
don't browse the internet for porn
don't click on Your Lottery Numbers.docx
 
@kalina don't troll its even WORSE
 
9:51 AM
don't open zip files from untrusted sources
run a pop up blocker
run a ad blocker
 
@Saladin FWIW I just use Windows Security Essentials on modern versions of windows then add other protections (e.g. EMET) where I think they make sense. Paid for A-V isn't sufficiently better for my persona use-cases
 
@kalina thanks you can stop now
 
run a script blocker
 
A lot of these requires previous knowledge though
 
don't run your browser as admin
@Saladin Well I can see you're the kind of person who wants to be secure with zero effort, and I'm sorry but no such thing exists
 
9:52 AM
@kalina well apart from the iPad, that's totally secure :)
 
Having a go at me for telling you how it is only demonstrates how much you want a free ride through life, maybe if you put in the tiniest bit of effort you would have less issues.
 
@kalina efforts but you are trolling doesn't help.
 
:25727618 you're better than this :S
 
lets have kitten pictures :)
I like kitten pictures
 
@Saladin you think that, because you're lacking it.
 
9:55 AM
Calling people a troll because they provide you an answer you don't like makes you the biggest troll
 
@kalina that's true
 
You're the troll, not I
 
@RоryMcCune just called "Windows Defender" now...
 
@AviD I can never keep up with MS' name changes,
it's just the not all that annoying A-V system to me
although sometimes their network protection seems to throw a fit and start chewing my CPU
 
@RоryMcCune yeah exactly :-)
which makes it worlds better than the others ;-)
@RоryMcCune what, windows firewall? really?
 
9:57 AM
@AviD exactly, I could never go back to the corp. days
 
isnt NCC a little bit corpy?
 
@AviD nah there's a process that I think looks for bad stuff on the network and every so often it seems to get upset
 
@RоryMcCune not familiar with it.
 
@AviD not for testers laptops, we get full admin rights, and just have certain baseline controls that we have to have in place
 
@RоryMcCune like a scanner type of thing?
 

« first day (1807 days earlier)      last day (3074 days later) »