How to recover from a ransomware attack

How to recover from a ransomware attack

It’s one of the most dreaded malware experiences you can have: Your computer freezes on a screen message that demands money or all your data will be destroyed. Ransomware is a serious problem, but it is possible to recover from it.

CSO’s Steve Ragan has deliberately infected a computer with the Locky ransomware so he can show you step-by-step how you might get your data back on a Windows 10 system. Note that this process assumes you have backed up your computer prior to the ransomware attack. A summary of the video follows.

0:16 – Reboot Windows 10 to safe mode. Hold down the Shift button, and click Restart. When the computer's back up, you'll see that you have three options to pick from. Click Troubleshoot. Once that screen comes up, click Advanced Options and then Startup settings. From there, click Restart. 

This will put your computer into a selective boot mode. Once the computer boots out of BIOS and comes back into the operating system, you're going to be shown a list. This list requires your function keys: F1, F2, etc. Press F4 for Safe mode.

2:35 – Install anti-malware software. Once Safe mode is loaded, you need to install some anti‑malware. Steve downloaded and installed Malwarebytes and HitManPro, Both are free. The goal is to find and remove Locky, though there's no guarantee. 

3:00 – Scan the system to find the ransomware program. The passive scan with Malwarebytes detected and removed Locky, requiring a reboot. The reboot returns you to the normal desktop. At this point, boot back into Safe mode and open Malwarebytes again.

Select the Custom scan. Configure that to scan all of drive C and all of drive E if you suspect the malware resides there as well. On the left side of the screen, check the box that says Rootkits and then hit Scan. This scan will take some time. Then run HitmanPro to see if it finds anything that Malwarebytes missed.

4:55 – Restore the computer to a previous state. Right‑click and go to System. Click on System Protection, and you see System Restore. You should see an an automatic restore point from before the computer was infected. Once started, you can't stop.

Right‑click on the Start button and go to Control Panel. Select Backup and Restore to restore your files from a backup. Hit Restore and Finish.

Get a 3-year Windscribe Pro VPN subscription for $22.49

Get a 3-year Windscribe Pro VPN subscription for $22.49

CNET's Cheapskate scours the web for great deals on PCs, phones, gadgets and much more. Questions about the Cheapskate blog? Find the answers on our FAQ page. Find more great buys on the CNET Deals page and follow the Cheapskate on Twitter!

Windscribe

This is something of a rerun. In the past I shared the lifetime version of this offer, but, let's face it, technology changes so rapidly... Does lifetime anything really make sense? Three years from now, we might all be using implanted-microchip-based security.

Anyway, if you're already using a virtual private network (VPN) to keep your internet connections secure, you can skip on down to the bottom, where you'll find some lovely bonus deals.

Everyone else, listen up. You should be using a VPN to keep your internet connections secure. That's especially true if you frequent coffee shops, airports and other places that serve up public Wi-Fi networks. Hackers can and will do their thing if you give them the chance. Look no further than this story of a midflight security breach experienced by a journalist.

That kind of thing is kind of scary, I think, but there's an easy fix: Always use a VPN. There are countless options out there, including some perfectly decent free ones. That said, I'm always a fan of "going pro" when you can do so on the cheap. And today's deal definitely qualifies.

It's a Windscribe VPN Pro 3-year subscription for $22.49. Normally this service runs $90 for just one year. 

I've featured other VPN deals before, so what makes this one different? For starters, it's available for just about every platform: Android (a native app is just about to be released), iOS, Linux, Mac and Windows. Your Pro subscription entitles you to unlimited data and unlimited access on unlimited devices. The service offers servers in 46 locations worldwide.

Windscribe also unlocks geo-restricted content, and its browser extensions block ad beacons/trackers as well.

Does it really work, though? Windscribe earned positive reviews from sites such as BestVPN and VpnMentor, though be aware that both of those sites are affiliate-supported. Interestingly, one of BestVPN's big complaints was price -- but that goes out the window with today's deal. Check out this recent TechRadar review as well.

I'd also point you to the user reviews of the iOS version: They average out to 4.5 stars out of 5. 

For what it's worth, the free version of Windscribe might be sufficient for your needs, or at least a good place to start, but it's limited to 10GB of data per month, one connection and eight locations.

Your thoughts?

By the way, if you're looking for more VPN choices, check out CNET's VPN service roundup.

Bonus deal: Costco shoppers tend to assume the warehouse offers the best prices on absolutely everything, including tech products and electronics. But that's not always the case, so before you splurge on that laptop or big TV, make sure to shop around.

Don't have a Costco membership? Here's a rare chance to get a deal on one: For new members only, Groupon has a Costco 1-year Gold membership for $60, a price that includes a $20 Costco cash card, a $75 Costco travel card, $25 off any online order of $250 or more and three in-store freebies. Combined value: $215.63.

Today's lesson: "Qi" is pronounced "Chee." Don't ask questions.

Seneo

Bonus deal No. 2: I've never owned a phone that supports wireless charging -- but, boy, do I want to. If and when that happens, I suspect I'll need a few charging pads: one for the desk, one for the nightstand and so on.

Like this one: For a limited time, and while supplies last, you can get the Seneo Qi wireless charging pad for $5.99 when you apply promo code Z6HZESBG at checkout.

This works, of course, only with Qi-compatible products: late-model Samsung Galaxy phones, Google Nexuses, etc. I'll freely admit I don't know a lot about the tech, but it appears this pad has just one charging coil; others have two or even three. So it's probably not as fast at charging? In any case, the user reviews are mostly positive, which some complaints regarding the brightness of the charging indicator. (This might not be the best option for your nightstand.)

Bonus deal No. 3: Game time! Ending tomorrow, or when the licenses run out, GOG is giving away copies of zombie platformer Deadlight: The Director's Cut. (Just look for the rather slim giveaway banner on the home page.) You'll need a GOG account; once you're signed in, just click the giveaway banner to add the game to that account. Then go to your game library, where you'll find three installer files to download.

Incidentally, Deadlight: The Director's Cut would cost you $11.99 if purchased from Steam. The user reviews there are somewhat mixed; apparently the game has some problems with saving your place. But, hey, it's free, so no harm in giving it a try!

Bonus deal No. 4: Still renting your cable modem? You could save as much as $10 to $12 per month by buying your own (though you'll need to add a router to the mix if your rental modem doubles as one). Typically I see these selling for $60 to $70, but for a limited time, and while supplies last, Office Depot/Max has the TP-Link TC-7610 Docsis 3.0 8x4 cable modem for $24.93, shipped (plus tax). It's compatible with Comcast, Time Warner and several other major cable companies (but you should probably call yours first just to make sure it'll work).

Protect Your Private Browsing Using VPN Router

Protect Your Private Browsing Using VPN Router

Reggie Yater, Negosentro | A VPN is an abbreviation for Virtual Private Network. This demonstrates an encrypted and secure connection. The term, “encrypted” denotes the conversion of the codes into information and only an authorized network can read and access the codes. As to security purposes, the data are protected from any means of web threats due to the functionality of these devices.

Moreover, a router can help you visit and share on a different private network. Did you experience visiting a site but it does not allow you to enter? Well, that’s one of the reasons why people are using VPN routers.  

What are the 3 benefits of VPN Router?

Secure Your Surfing Mode

The router secures the internet connection usage and it serves as a cloak in protecting the data packets. However, it may still be penetrated with suspicious data attacks hence; you should install a VPN router to maximize the protection.

In this way, you can have the secure mode whenever you surf to different sites and networks. It will also deter the possibility of lags and web threats. For a safe encryption process, some of these devices are installed with SSL, PPTP, or IPSec as a security conversion.

Avoid Filtering and Censorship

Connecting to a different network is definitely threatening because it may affect the performance of your connection. It may also put your computer at risk since you are illegally entering into a private network hence, it may reject your IP address and disallow your entry.

Using this router, it helps the user to enter in a private network without causing any threat to that network. Let’s say, for instance, some computer gamers are allowed only up to their country’s area location. If you use the router, it can help you visit their country’s online games and you can be able to play their games.

3.VPN and SSL Encryption Built-in

By simply buying a VPN router, there’s no need to separately install the private network and SSL encryption. Of course, you can choose quality and best routers that can provide you the excellent service. To name a few, you may consider Netgear R7000 AC 1900 Nighthawk DD-WRT, Linksys WRT1200AC DD-WRT, or Asus RT-AC56U AC1200 TomatoUSB.

For the providers, these are the most popular service providers across nations namely HideMyAss, ExpressVPN, and IPVanish.

How to check the status of your VPN?

In the recent discovery, the programmers have found out that some remote sites can access a user’s IP address through WebRTC (a.k.a. Web Real Time Communication). It is a feature built-in to the popular browsers which has the capability to reveal the user’s IP Address even if they’re connected with a VPN. In this section, we will show you how to detect if your VPN is affected by this issue.

Look for a legit site for testing such as “What is my IP address”. Next, put your actual IP Address.

Log in using your private network and select preferred exit server in another country then, verify that you are connected.

Switch your tab again to the IP test site and check your IP add. You should see a new IP add that corresponds to the country that you selected and to your VPN.

Take another test using the WebRTC test page and make sure that both have the same results. If not, it only means that your browser is leaking your IP add in public.

As the final solution, you may disable the WebRTC in your browser’s settings then repeat the steps to verify the outcome.

Internet

Internet-based Companies Boost U.S. Ad Revenue

Aug. 15, 2017 11:55 a.m. ET

Domestic ad revenue in 2017 is on track to increase 4% to 5% in 2017, thanks to growth from internet-based companies, according to Brian Wieser, a senior research analyst for Pivotal Research Group.

A group of ten large web firms, including Google, Amazon and Expedia, increased their spending on sales and marketing by a median growth rate of 24% in the most recent quarter, he said in a note to investors.

“We think it’s safe to say that this implies web endemics increased spending on advertising at a significantly faster pace than did other types of advertisers,” he said.

Amazon spent $951.2 million on media in the U.S. in 2016, not including spending with some of the biggest social media platforms, according to data from Kantar Media. That’s up about 8% from $877.2 million in 2015.

Increased spending by web-based companies is likely fueling the 20% growth rates experienced by digitally-oriented media owners, said Mr. Wieser.

Many of these big ad spenders, such as Google and Amazon, are also the digital media platforms that are raking in ad revenue from advertisers.

“Industry growth is more notable considering the widely reported weaknesses at many of the world’s largest mass marketers, especially including fast moving consumer goods manufacturers,” he said.

Mr. Wieser is forecasting a 1% decline for national TV and similar rates for radio and outdoor due to more “tepid growth rates” by “traditional marketers.” Most print-based media will experience double digit declines, he predicts.

While digital media platforms like Facebook and Google are currently benefiting from increases in digital ad spending, Mr. Wieser predicts that digital media owners will experience a deceleration of growth of domestic ad revenue into the “low teens and then high single digits within several years’ time.”

Write to Alexandra Bruell at alexandra.bruell@wsj.com

Networking

Millions of Ransom Demanded by Hackers for Stolen HBO Data

The hackers who breached HBO's servers have declined a ransom payment of $250,000 from a top HBO exec, according to an email leaked by hackers to the press. Now, we have learned that HBO has been trying to bargain with the hackers, even offering them a $250,000 "bug bounty" award to give the company more time.

Earlier this week, a video circulating online authored by someone identified only as "Mr. Smith" said the hackers had videos, scripts, personnel files and other from the breach.

The hackers claimed they stole no less than 1.5TB of data after more than six months of probing the security of HBO's internal network and threatened to reveal more content, including more personal data.

HBO, which previously acknowledged the theft of "proprietary information", says it's continuing to investigate and is working with police and cybersecurity experts.

The hackers have already begun to trickle some of the data into public, including unaired episodes of Ballers and Room 104 and a script summary of Game of Thrones. Leakers gonna leak. Just... please no Game of Thrones spoilers before Sunday night? With this new release of data, the hacking group demanded millions of dollars in order for them to stop leaking any more of the company's information.

R. Kelly Criminal Investigation To Be Pursued By Fulton CountyFriday afternoon, however, Howard released a statement that his office is not now investigating R. It is unclear if Chicago police will follow Georgia's lead in launching an investigation as well.

An extension for the deadline of payment of the ransom was also requested by HBO. This was the second data leak from the hackers, but so far, the damage to the network has been limited compared to a similar hack on Sony's network in 2014.

It is unlikely that the hacker obtained of actual Game of Throne episodes.

One document allegedly includes HBO CEO Richard Plepler's contact list, along with a GoT cast list with contact information for actors including Emilia Clarke, Lena Headey, and Peter Dinklage.

In statements to the press, HBO still maintains that "the review to date has not given us a reason to believe that our email system as a whole has been compromised".

Model wanted her wealthy pals to pay ransom to ‘kidnapper’

Model Chloe Ayling’s alleged kidnapper demanded ransom money from three well-heeled Britons who she hoped would prevent her from being hawked online, according to a report.

Italian authorities named the trio Friday as celebrity agent David Read, 50, former Loaded magazine publisher Paul Baxendale-Walker, 53, and banker Rory McCarthy, 57, the Daily Mirror reported.

Ayling told police in Milan that her alleged kidnapper, Lukasz Herba, 30, ordered her to find three people who would be willing to fork over ransom money, the news outlet reported.

They were asked to pay about $65,000 to secure her release.

Read, who runs Neon Management, said he met Ayling during one of her photo shoots.

“Three weeks ago I was contacted by the Met Police who explained an email had been sent from her kidnapper to her model agency, in which I was named as someone who might help,” Read told the Mirror.

“I told the police everything I knew, which was not much. I understood Chloe was still in danger so I kept the meeting with the police secret, as the officers asked me to,” he said. “Next thing I heard about it was news she had been found.”

Ayling told investigators she provided the names of her wealthy contacts to her captors in hopes they’d pony up the cash to prevent her from being peddled on the dark web by the “Black Death” gang.

Herba, who released Ayling at the British consulate in Milan on July 17, has been charged with kidnapping to extort money. He claims he only got involved in the wild plot to raise money for leukemia treatment.