Can Cryptowall 3.0 Spread after i have made a image of HDD with Acronis via Boot CD

Hi everyone,

I have had a customer that has been infected by the cryptowall 3.0 ransomware and i am just doing fresh install after reformatting HDD

I have made a image on a USB Hard drive via Acronis via Boot CD of the infected system just for a reference point to go back on while i am trying to restore files.

I used malware bytes to delete the infection and rang it twice the first time it picking it up and deleting the second time it finding nothing.

Is there still a chance it is still infected and that Acronis TIB file being a risk plugging back into a new system and looking at.

Thanks Adam



As long as it isn't the boot image and you don't open any files you'll be fine. Check this article
http://mobile.experts-exchange.com/Security/Encryption/A_18086-Ransomware-Prevention-is-the-only-solution.html



As long as it isn't the boot image and you don't open any files you'll be fine. Check this article
http://mobile.experts-exchange.com/Security/Encryption/A_18086-Ransomware-Prevention-is-the-only-solution.html



Thanks For your reply

This one was a bugger new version of Cyrptowall seems to delete the shadow copies as well

Good lessons for backups for this customer

Adam







Share this

Related Posts