Cryptowall makes a comeback via malicious help files


Userlevel 7
Badge +54
Posted on 06.03.2015 A new spam wave has hit hundreds of mailboxes with malicious .chm attachments to spread the infamous Cryptowall ransomware.

Cryptowall is an advanced version of Cryptolocker, a file-encrypting ransomware known for disguising its viral payload as a non-threatening application or file. Its payload encrypts the files of infected computers in an effort to extract money for the decryption key.

http://www.net-security.org/images/articles/cryptowall-calc.jpg
Malware researchers from Bitdefender Labs found that the email blast, which took place in February, targeted users from around the world, including the UK, the US, the Netherlands, Denmark, Sweden, Slovakia and Australia. Following analysis, the spam servers appear to be in Vietnam, India, Australia, US, Romania and Spain. 
Full Article

3 replies

Userlevel 2
I just got that and have no clue how.
how do I get rid of it?
Can I get rid of it?
thank you in advance for any help you 
can offer me.
Userlevel 7
Badge +62
Hi Debbee,
 
Welcome to the Community Forum,
 
 
The best thing to do is to Open a Support Ticketand ask Webroot Support to take a look and remove this for you.  There is no charge for this if you are a WSA license holder, with a current subscription.
+
Virus Removal Options
https://community.webroot.com/t5/Webroot-SecureAnywhere-Antivirus/Virus-Removal-Options/ta-p/54074
 
 
Hope this helps,
 
 
Best Regards,
 
Userlevel 2
I am, just renewed recently! WOW thank you so much!

Reply