Article View: microsoft.public.security.homeusers
Article #7Re: Cannot work with my own files after system change (XP Pro SP3)
From: FromTheRafters
Date: Wed, 24 Mar 2010 02:03
Date: Wed, 24 Mar 2010 02:03
47 lines
3670 bytes
3670 bytes
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message news:8f-dnY-FtIu82zTWnZ2dnUVZ_gmdnZ2d@giganews.com... > From: "FromTheRafters" <erratic@nomail.afraid.org> > > | "fixfox" <mluisebay@googlemail.com> wrote in message > | > news:d1d77f21-d018-499d-a7e6-dab1f60d32c0@r1g2000yqj.googlegroups.com... > > > | ...nowhere I read that it did damage on files, specially by > encrypting > | them (In this case, it would be called a virus). > > | *** > | It would be called a virus if it replicated via infection. If it was > a > | virus, and also encrypted your files, it would be an instance of > | cryptovirology *and* ransomware if it wanted payment for the > decryption > | key. > | *** > > | [...] > > | The wicked system > | did not tell me that I would have to store my certificate or else I > | would surely have done it. I am a security fan. > > | *** > | IIRC W2K's EFS, by default, assigns the administrator as a recovery > | agent (sort of like a backup key). but gives no warning to the user > | about the importance of key backup. Vista and beyond do *not* assign > a > | recovery agent by default, but do advise the user about key backup. > | *** > > | [...] > > > Trojans employong cryptovirology have yet to use EFS to encrypt users > data for ransom. They use their own encryption engine. > > Example: GPCode Yes, I was more opposed to her thinking that the amount of damage (or encryption) is what makes the thing a virus. The rest contained good search words for an understanding of virus+crypto+criminal activities.
Technical Details
Message-ID:
<hobrtp$qru$1@news.eternal-september.org>Path:
arc1-ca.pugleaf.net!g2news2.google.com!news3.google.com!feeder.news-service.com!188.40.43.213.MISMATCH!feeder.eternal-september.org!eternal-september.org!.POSTED!not-for-mailReferences:
#gXwpndyKHA.5940@TK2MSFTNGP02.phx.gbl <22ad9909-e13b-402b-806c-26be69e7bfb7@t23g2000yqt.googlegroups.com> <872da17c-0318-4491-a582-fc014b216cbf@t20g2000yqe.googlegroups.com> <Mradna5iLeUpUzrWnZ2dnUVZ7vqdnZ2d@bt.com> <7ceb2815-fb36-42d8-a9b2-539025485084@q15g2000yqj.googlegroups.com> <B4SdnbwdW588lzXWnZ2dnUVZ8umdnZ2d@bt.com> <ho92kh023q6@news3.newsguy.com> <D42dncm1268wjjXWnZ2dnUVZ8hBi4p2d@bt.com> <237m77-5r6.ln1@fully.qualified.domain.name> <17udnewtQvuM5DXWnZ2dnUVZ8nmdnZ2d@bt.com> <n8bm77-1d7.ln1@fully.qualified.domain.name> <183b9642-3d46-4059-8d49-a279cdb8dfc9@z35g2000yqd.googlegroups.com> <ZMydnXc0_sSGAjXWnZ2dnUVZ8qKdnZ2d@bt.com> <d1d77f21-d018-499d-a7e6-dab1f60d32c0@r1g2000yqj.googlegroups.com> <hob7fb$hte$1@news.eternal-september.org> <8f-dnY-FtIu82zTWnZ2dnUVZ_gmdnZ2d@giganews.com>Show Full Headers
Complete Article Headers
X-Google-Thread: 216722,eb1841bc6909b741 X-Google-NewGroupId: yes X-Google-Thread: faa3c,fc8a51b333c04ed9 X-Google-NewGroupId: yes X-Google-Attributes: gid75a5d47e0,gid4e777fa27a,domainid0,public,usenet X-Google-Language: ENGLISH,ASCII-7-bit Path: arc1-ca.pugleaf.net!g2news2.google.com!news3.google.com!feeder.news-service.com!188.40.43.213.MISMATCH!feeder.eternal-september.org!eternal-september.org!.POSTED!not-for-mail From: "FromTheRafters" <erratic@nomail.afraid.org> Newsgroups: microsoft.public.security.homeusers,24hoursupport.helpdesk Subject: Re: Cannot work with my own files after system change (XP Pro SP3) Date: Tue, 23 Mar 2010 22:03:32 -0400 Organization: A noiseless patient Spider Lines: 49 Message-ID: <hobrtp$qru$1@news.eternal-september.org> References: #gXwpndyKHA.5940@TK2MSFTNGP02.phx.gbl <22ad9909-e13b-402b-806c-26be69e7bfb7@t23g2000yqt.googlegroups.com> <872da17c-0318-4491-a582-fc014b216cbf@t20g2000yqe.googlegroups.com> <Mradna5iLeUpUzrWnZ2dnUVZ7vqdnZ2d@bt.com> <7ceb2815-fb36-42d8-a9b2-539025485084@q15g2000yqj.googlegroups.com> <B4SdnbwdW588lzXWnZ2dnUVZ8umdnZ2d@bt.com> <ho92kh023q6@news3.newsguy.com> <D42dncm1268wjjXWnZ2dnUVZ8hBi4p2d@bt.com> <237m77-5r6.ln1@fully.qualified.domain.name> <17udnewtQvuM5DXWnZ2dnUVZ8nmdnZ2d@bt.com> <n8bm77-1d7.ln1@fully.qualified.domain.name> <183b9642-3d46-4059-8d49-a279cdb8dfc9@z35g2000yqd.googlegroups.com> <ZMydnXc0_sSGAjXWnZ2dnUVZ8qKdnZ2d@bt.com> <d1d77f21-d018-499d-a7e6-dab1f60d32c0@r1g2000yqj.googlegroups.com> <hob7fb$hte$1@news.eternal-september.org> <8f-dnY-FtIu82zTWnZ2dnUVZ_gmdnZ2d@giganews.com> Injection-Date: Wed, 24 Mar 2010 02:03:37 +0000 (UTC) Injection-Info: news.motzarella.org; posting-host="NyyDhrAmMD/nR+Q4vQwqzA"; logging-data="27518"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/wzyuaYGWIPjP8DDEEtzbG" X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579 X-RFC2646: Format=Flowed; Response X-Newsreader: Microsoft Outlook Express 6.00.2900.5843 Cancel-Lock: sha1:S72tmHeI2T16MoLf+iJ7vJM4QR8= X-Priority: 3 X-MSMail-Priority: Normal