It depends, from what I've heard your chances are ~33% It's mutating .Versions are out there without a killswitch, or modified killswitch URLs
Yeah its based of code the NSA used to backdoor into windows which they have been using for god knows how long and has now leaked. The only way to guarantee you won't be affected by it is to update to latest versions of windows, or at least the single update patch that fixes it. If you get infected just kiss everything goodbye, why would they even take the time to email you an unlock key when they already have your money.
This thread is kinda worrying me... I'd update Windows, but it always tells me "setup failed, turn n the PC" (it really says n -> schalten Sie den PC n). Any idea what to do?
I wonder if you remove the hard drive from the infected machine and plugged into into another one as a secondary drive you could extract your files that way. Although I'd expect all the files to be encrypted by the ransomware.
They actually should be motivated to decrypt your files after you pay them, because if they didn't, they would get bad fame and people, who have heard about their bad practices, wouldn't pay if they knew it's not going to help. Of course, there always are people who will pay no matter what, but in the audiences of people who are a little more tech savvy that would be important. In my country there also has been ransomware, but from what I have read, people, who paid the bitcoins, usually got their data decrypted. Also the ransomware usually is delivered through email with the help of attachments(the most popular email provider in my country allows sending .exe files). The email usually is something about bills, taxes or fines and either there is a link to a webpage which downloads something or there is the attachment. The file in attachment usually ends in something like .docx.exe so it looks a little more like a legit thing.
Agree. I sometimes recieve emails that has an attachments with ends with .docx.exe, .apk.exe, .docx.app and all of them are virus ( after i scanned it with Norton )
This is different, as I said before it uses a leaked NSA backdoor in windows so it has no requirements to be downloaded or ran, it can just pick an IP address, using another infected computer and can spread like that. That's why its been such a huge problem.
Last I checked, XP is an operating system or Nvidia TITAN Xp graphics card, not a live malware destroying bot. Microsoft fixed it.
